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IN THE UNITED STATES DISTRICT COURT 
FOR THE NORTHERN DISTRICT OF GEORGIA 
ATLANTA DIVISION 


DONNA CURLING, ET AL., 
Plaintiffs, 
vs. 

BRAD RAFFENSPERGER, 
ET AL., 

Defendants. 


) 

) 

) 

) CIVIL ACTION 

) 

) FILE NO. l:17-cv-2989-AT 

) 

) 

) 

) 


PLAINTIFFS’ BRIEF 
ON GEMS DATABASE DISCOVERY 


Plaintiffs jointly submit this brief in response to the questions raised in the 
June 28, 2019 telephone conference relating to the joint discovery dispute initiated 
by the Coalition Plaintiffs (Doc. 416) relating to the production of GEMS 
databases. As explained below in Part I, the GEMS databases should be produced 
immediately without restriction because they are highly relevant and not 
confidential. State Defendants’ counsel conceded this point during the June 28 
teleconference, emphasizing that the GEMS databases themselves provide the 
“roadmap” that needs to be analyzed to identify flaws or vulnerabilities in the 
GEMS system. (June 28, 2019 Hearing Tr. 23:4-9, attached as Exhibit A.) As 
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explained in Part II, production of reports generated from the GEMS databases, 
without the GEMS databases themselves, would be insufficient because reports 
will not disclose defects in the underlying database configurations. As explained 
in Part III, the production of the GEMS databases is separate and distinct from the 
more complex production of images of the GEMS servers and should precede that 
production. The GEMS databases do not implicate the security concerns 
Defendants have raised regarding the GEMS servers and thus do not warrant the 
sort of security measures discussed for the servers. Neither does production of the 
databases involve anything like the process for producing images of the severs. 
The GEMS databases can—and should—be produced immediately on discs or 
hard drives. 1 There is no cause for further delay, which already has prejudiced 
Plaintiffs’ ability to prepare for the July 25-26 hearing. 


1 To expedite the production of the GEMS databases as a critical first step in the 
analyses needed here, Plaintiffs focus here on the production of those databases 
rather than the forensic images of the GEMS servers. Plaintiffs are prepared to 
meet and confer further with Defendants further regarding the process and 
reasonable security measures for production of the images. If the parties cannot 
resolve that dispute, they will return to the Court for resolution. Obtaining the 
GEMS databases now likely will help resolve or at least narrow that dispute and 
make the issues regarding that production less abstract. 


2 
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I. THE GEMS DATABASES SHOULD BE PRODUCED WITHOUT 

RESTRICTION 

Plaintiffs seek immediate production of electronic copies of the GEMS 
databases for the November 6, 2018 election that the Secretary prepared for and 
transmitted to each Georgia county, and the corresponding GEMS databases that 
the Secretary received from each county after the election. (Doc. 416-1 at page 
6). 2 This production should be prior to, and separate from, the more complicated 
and sensitive production of the forensic images of GEMS servers. Production of 
the GEMS databases first—while incomplete for the analyses needed in this case— 
will allow valuable (but far less expensive and time consuming) discovery to 


2 Plaintiffs seek pairs of GEMS databases in the Secretary possession for each of 
the 159 Georgia counties: the Secretary’s copies of the databases that the Secretary 
sent to the counties, and the Secretary’s copies of the databases that the counties 
returned. In discussions with the Secretary’s counsel during the June 28, 2019 
telephone conference, Plaintiffs suggested reducing the number of counties to 25. 
The Secretary, however, explained that their objection to producing the databases 
is confidentiality regarding their structure, not burden, and thus there is no 
distinction between producing the database for one county versus all 159. June 28, 
2019 Hearing Tr. 28:8-15 (“I think the important piece is we don't see a distinction 
between 25 and the entire database because our concern is not the amount”). 

Plaintiffs also seek from defendant Fulton County and, currently, from three third- 
party counties copies of their databases. These requests are in addition to the 
requests directed at the Secretary. These databases should be the same as the 
databases in the Secretary’s possession, and examining the extent to which they 
differ is a critical part of the analyses needed to evaluate security vulnerabilities 
and flaws in the GEMS system in this case. 


3 
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proceed immediately and will allow a more efficient sequence of gathering 
information. 

Defendants bear the burden to support their confidentiality claims regarding 
the GEMS databases. In re Mentor Corp. ObTape Transobturator Sling Prod. 
Liab. Litig., 632 F.Supp. 2d 1370, 1375-76 (M.D.Ga. 2009) (citing In re Grand 
Jury Investigation, 842 F.2d 1223, 1225 (11th Cir.1987)). Plaintiffs bear no 
burden to prove otherwise. But Defendants have offered only vague, conclusory 
claims about the “structure” of the GEMS databases, without any evidentiary 
support. In fact, during the Court-Ordered meet-and-confer on June 28, State 
Defendants’ counsel questioned Plaintiffs’ experts at length—without interruption 
from Plaintiffs’ counsel—about their need for the GEMS databases; but State 
Defendants’ counsel abruptly interrupted when Dr. Halderman asked Merrit 
Beaver, Chief Information Officer of the Secretary of State, a simple and direct 
question concerning the GEMS databases and refused to allow Mr. Beaver to 
answer the question. Throughout the call, Mr. Beaver merely parroted counsel’s 
conclusory claim that the “structure” of the GEMS databases is somehow 
confidential. He never explained how or why this is so or provided any details to 
support the claim. When Dr. Halderman asked him what aspects of the GEMS 
system he would examine were he to analyze the security of the system as 
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Plaintiffs’ experts seek to do and whether he would rely only on what State 
Defendants have offered to produce, that’s when State Defendants’ counsel 
immediately shut down the discussion and refused to allow him to answer. 3 State 
Defendants’ counsel evidently feared what he would have to admit (without having 
been prepped for the question): no reliable or reasonable analyses of 
vulnerabilities or flaws in the GEMS system could be performed with the paltry 
reports State Defendants have offered or without the GEMS databases Plaintiffs 
seek. 

The fact is that the GEMS databases should be produced without any 
“confidentiality” designation because the State Defendants have not identified any 
confidential information that is contained in the GEMS databases. 4 Indeed, the 


3 During the June 28, 2015 conference with the Court, State Defendants’ counsel 
claimed that “the questions were turning into a cross-examination and a deposition 
of whether Mr. Beaver would concede certain points.” Hearing Tr. 22:6-9. This 
was surprisingly and disappointingly untrue. Dr. Halderman—rather than 
Plaintiffs’ counsel—asked Mr. Beaver a single, direct question aimed at 
understanding what Mr. Beaver would examine for the sort of security analyses 
Plaintiffs’ experts seek to do regarding the GEMS system. The only “cross- 
examination” that occurred was by Mr. Tyson of Plaintiffs’ experts, which 
proceeded uninterrupted. Plaintiffs’ experts have nothing to hide. 

4 The GEMS databases that Plaintiffs seek in discovery should not contain 
passwords, encryption codes, or other security information, but, if they do, that 
information can be redacted before production. 


5 
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State Defendants concede that there is no confidential data contained in GEMS 

databases, and instead vaguely insist that the “structure” or “archecture” of the 

GEMS databases is somehow confidential because it is unique to Georgia and that 

disclosure of the GEMS databases will somehow threaten election security. Yet 

the State Defendants do not explain even generally what is unique about the 

“structure” of Georgia’s GEMS databases (or what that even means) and do not 

provide any evidence or expert testimony supporting that naked assertion. 5 

In fact, the Secretary of State’s current position is directly contradicted by 

the sworn testimony of Merle King, the former Executive Director of Georgia’s 

CES. Mr. King was an expert for the government in the Pima County case, and 

testified that the “structure” of the GEMS databases in Georgia is consistent with 

that of GEMS databases all over the country: 

The structure of the database is consistent through all jurisdictions that 
use GEMS, so the revelation of one jurisdiction's database structure 
reveals information — potentially reveals information about other 
jurisdictions. 

(Deposition of Merle King, at 11:17-21, attached as Exhibit B). 


5 For testimony explaining the GEMS databases generally, and the issues outlined 
in this Brief, see the Declaration of Dr. Alex Halderman, attached hereto as Exhibit 
G. 


6 
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In addition, Coalition Plaintiffs’ expert has reviewed GEMS databases from 
other jurisdictions (which are public records) and has found “no data” that “poses a 
privacy threat to voters or exploitation of the voting system by being disclosed.” 
(Bernhard Decl., July 1, 2019, attached as Exhibit C). In addition, Mr. Bernhard 
states: “The structure of the database is disclosed in GEMS manuals that have been 
publicly available since the system was first put in service.” (Id.). 

While the GEMS servers—containing the GEMS software —may contain 
source code and sensitive information that needs reasonable security protection, the 
GEMS databases do not. A GEMS database is just a file—essentially a table— 
containing data. Before the election, it contains data on how ballots should be 
configured and votes recorded. After the election, it contains data about those 
votes. Because the GEMS databases are just Microsoft Access worksheets, they do 
not contain proprietary source code, personally identifying voter information, or 
other sensitive information. (See generally Bernhard Decl. ]Hf 12 - 14). 

Other states’ GEMS databases have been made public without any negative 
consequences. The website Black Box Voting has published not only GEMS 
databases from Alaska and California, but also other documents related to the 
GEMS Election Management System more generally. Bev Harris, Elections 
Industry: Voting System Technical Material, Manuals, Troubleshooting , Black Box 
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Voting.org (Jan. 8, 2014), http://blackboxvoting.org/voting-svsteiyi-technical- 
information/ . These include a GEMS user manual, a GEMS training guide, 
assignment lists for locations (including Georgia) using GEMS EMS, a manual for 
the communications protocol used to exchange data with a GEMS Server, and a 
“working full installation kit for Diebold GEMS system.” No known security 
issues have resulted from the public disclosure of GEMS databases from Alaska, 
California, or Arizona. Thomas A. Ryan served as a member of the Pima County 
Election Integrity Commission from 2008 to 2018. In his declaration, attached 
hereto as Exhibit D, Dr. Ryan states: “GEMS databases were available for public 
inspection in Pima County from 2008 until the system was replaced in 2016. 
During that time, I am aware of no problems arising from the availability of the 
databases.” (Id. 117). 

The State’s handling of the GEMS Databases also is inconsistent with their 
current claim of confidentiality. Director of Elections Michael Barnes admitted in 
deposition testimony last week that at least one Georgia GEMS database was 
accessible and downloadable on CES’s websever at KSU for months (and probably 
years) and that the Secretary did not secure CES’s Webserver for months after 
being warned by Logan Lamb of the public accessibility to the databases and 
associated files. 


8 
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State Defendants’ confidentiality claim is further inconsistent with the 
extremely wide distribution of the databases. In his deposition, Mr. Barnes 
confirmed that GEMS databases are sent to all 159 counties and then copied by the 
counties onto memory cards that are then loaded into the State’s 27,000 DRE 
machines. Lynn Ledford, Gwinnett County Director of Elections and Registration, 
testified that counties share DRE machines with municipalities requiring DREs to 
conduct their own municipal elections. The internal memory of these DREs 
contains GEMS database information from prior elections when the machines are 
transferred to the municipalities. The municipalities are not subject to 
nondisclosure agreements for this GEMS database data. See Deposition of Lynn 
Ledford, attached as Exhibit E, at 173:15-177:22. 

Jennifer Doran, Morgan County Election Supervisor testified in her 
deposition that Morgan County engages an independent contractor to support the 
administration of their elections. This contractor has access to the counties’ GEMS 
Databases without restrictions on disclosure. 6 

Plaintiffs understand that it is frequently more convenient for parties to 
concede to confidential treatment of documents in discovery even when there is no 


6 The transcript of Ms. Doran’s June 29, 2019 deposition will be filed with the 
Court when it is available. 
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colorable claim to confidentiality, simply to avoid the burden and expense of 
disputes such as this. However, to concede to a confidentiality designation for this 
manifestly public information would be inconsistent with the standards this Court 
has articulated for such treatment and with the fundamental principles of 
government transparency and accountability through open meetings and open 
records. Plaintiffs will, of course, comply fully and carefully with any Protective 
Order entered by this Court, but do not believe that the State Defendants have 
come close to carrying their burden of establishing that the GEMS databases are 
confidential. 

II. REVIEW OF REPORTS GENERATED BY GEMS DATABASES IS 

INSUFFICIENT 

State Defendants offer to produce certain, limited reports generated by 
GEMS databases as a substitute for the production of the GEMS databases 
themselves. A closer review of what the GEMS databases contain, however, 
confirms that review of reports generated by the GEMS database will not provide 
meaningful discovery because they will likely not disclose errors or other flaws or 
vulnerabilities in the configuration of the GEMS databases. 

The GEMS databases are worksheets built in Microsoft Access, a commonly 
available commercial software program used for worksheets and databases. (M. 
Bernhard Deck, attached as Exhibit C, at ^ 13). In his recent deposition, Michael 
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Barnes confirmed that the GEMS databases are built in the Secretary of State’s 
office for each election in each county and then transmitted to each county prior to 
the election. After the election, each county transmits the GEMS database back to 
the Secretary of State with completed vote information. 

To show how GEMS databases are built, Plaintiffs have attached as Exhibit 
F selections from the GEMS users manual. 7 To build a GEMS Database for a 
particular election, the Secretary of State’s staff will load tables of information into 
the database for the particular race, and then make a number of choices about the 
relationships between the various tables of information. Several of the steps would 
involve naming the election (in the User Guide it is “Beaufort County General 
Election”) (page 2-4), selecting a date (page 3-4), and selecting the “voter group.” 
A non-partisan election (“N.P.”), for example, should be coded with the 
identification number “0.” A Green party primary should be coded with the voter 
group number 5, which number (if the database is configured correctly) should 


7 In his recent deposition, Mr. Barnes testified that the generic 2005 Users’ Guide 
attached as Exhibit D appears similar to the Users Guide used by Georgia today. 
While GEMS Databases in Georgia may have some Georgia-specific fields or data, 
the structure is identical to every other GEMS Database from every other 
jurisdiction. Defendants have provided no evidence to the contrary. (The 
transcript of Mr. Barnes’ deposition will be provided to the Court as soon as it is 
available). 
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correspond to Green party voters. Other sections of the User Guide shows how to 
assign numbers for the various candidates in each election. 

An examination of a GEMS database itself may, for example, reveal quickly 
that the database was misconfigured to record votes cast for Candidate A as votes 
cast for Candidate B, or that votes cast for Lieutenant Governor were actually 
being recorded as votes for State Senate District 47 candidates, or that some ballot 
styles displayed on the touchscreen failed to include a given contest. No standard 
report produced or display of archived files will detect the source or cause of the 
errors, and the reports themselves may be corrupted. Diebold voting system experts 
know that the GEMS Database “fails to conform to fundamental database design 
principles and software industry standards for ensuring accurate data. Thus, in 
election tabulations, aspects of the GEMS design can lead to, or fail to protect 
against, erroneous reporting of election results.” Thomas P. Ryan and Candice 
Hoke, GEMS Tabulation Database Design Issues in Relation to Voting Systems 
Certification Standards, 2007 Usenix/Accurate Electronic Voting Technology 
Workshop, at l. 8 


8 https://www.usenix.org/1egacy/events/evt07/tech/full papers/ryan/ryan.pdf . 
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GEMS database analysis and comparisons to polling place paper records 
could also reveal signs of interference. Standard reports from the GEMS databases 
will not inform an examiner of a programming, configuration, or operational error, 
and would not reveal malicious hacking or other interference. If someone had 
gained access to a GEMS database and intentionally misconfigured it—without 
malware or some sort of hacking—the reports might read as completely normal 
because the database is producing what it was configured to produce. “The 
Diebold/GEMS system is particularly vulnerable to malicious data manipulation 
because the election database can be edited with the aid of commonly available 
software. Editing the database in this way leaves no traces in the election system 
activity logs.” Ryan Deck at 13. “Detection of data manipulation would require 
analysis of the election database to look for inconsistencies. Standard reports 
generated by the GEMS system would rarely detect such manipulation or 
configuration errors.” Id. at 14. 

Coalition Plaintiffs’ expert Matthew Bernhard explains that the only way to 
determine the impact of potential programming defects upon the number of votes 
is to review the original files used in the election—in this instance, the GEMS 
databases. (Bernhard Deck 15, attached a Exhibit C). No standard report 
produced by the Diebold system would likely expose such programming errors, in 


13 


Case l:17-cv-02989-AT Document 441 Filed 07/01/19 Page 14 of 443 


particular because the programming that generates such reports may itself be 
faulty. 9 Malware and other forms of intentional interference may affect the 
production of the reports as well, in order to cover its tracks. Moreover, the reports 
are just PDF printouts that can be hundreds of pages long for each county for each 
election. They are not amenable to proper data analysis or even review; it would 
be logistically infeasible for Plaintiffs to rebuild the data in these reports into a 
useful data set. The ballot image reports from just the November 8, 2018 election 
would comprise nearly 4 million pages, making analysis impossible with mere 
PDF reports. The GEMS databases themselves are needed for meaningful security 
and integrity analyses. 

III. PRODUCTION OF GEMS DATABASES IS DISTINCT FROM AND 

SHOULD PRECEDE PRODUCTION OF GEMS SERVERS 

For a host of practical reasons, the production of the GEMS databases 
should precede the production of the more complex and sensitive GEMS servers. 
Review of the GEMS databases—while incomplete—is the most expedient means 
of beginning to identify errors or other flaws or vulnerabilities in the GEMS 


9 These reports include the “Base Precincts With Races Report,” the “Vote Center 
with Cards Report,” the “Statement of Votes Cast Report,” the “Summary Report,” 
and the ballot image reports. 
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system and does not implicate the security concerns presented by review of the 
GEMS servers. 

Specifically, Plaintiffs seek review of the GEMS databases to answer 
questions related to specific anomalies and apparent errors detected in reviews of 
public records of recent elections, especially the November 6, 2018, election. 

These questions include such issues as: 

• Did errors in a GEMS database configuration cause some voters’ ballots 
to exclude the Lt. Governor’s race? 

• Did database configuration defects create an exaggerated level of 
undervote in the Lt. Governor’s race in some precincts in African 
American communities? 

• Are anomalous results on election night poll tapes also reflected in the 
vote tally databases? Are there patterns that point to the underlying cause 
for the anomalous results? 

• Are vote tallies accurately tabulated? 

• Are there configuration defects that caused the unexpectedly high 
participation rates in isolated low profile down ballot races? 

• Did configuration defects switch the vote tallies between candidates? 
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• Were there memory cards containing votes reported on poll tapes that 
failed to be loaded into a GEMS database? 

• When poll tapes have discrepant ballot cast quantities, which number of 
ballots was counted? 

• For poll tapes dated well before or after the election, what vote tallies 
were included in the GEMS Databases for the official count? 

• What vote data was uploaded from DRE memory cards that poll tapes 
indicate appear to contain corrupted time, date, and election information? 

• Why do races for Congressional Districts 6, 11, and 13 appear on the poll 
tapes at Grady High School precinct, which is in Congressional District 
5? Are the DREs generating defects or was there a misconfiguration in 
the GEMS Databases? 

• Why do some DRE ballots appear to show no votes cast? Is this a 
configuration error or other potential defect to be analyzed? 

• During Fulton County’s upload of the April 18, 2017, Special 
Congressional District 6 election, what GEMS database loading errors 
were recorded? Do all memory cards appear to be loaded? Are there 
anomalous appearing results in the database from cards that were 
improperly uploaded on election night? 
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• When polling place recap sheets show a different number of voters 
voting than the DRE machines report as total ballots cast, what number 
of ballots was recorded in the GEMS Database for vote counting? 

Subjecting the GEMS databases to the security measures that forensic 
images of the GEMS servers may warrant would greatly prejudice Plaintiffs and 
their ability to prosecute their claims in this case. The labor-intensive work in 
reviewing the GEMS databases for answers to these and other important questions 
regarding the security and integrity of the GEMS system does not require cyber¬ 
security or computer science expertise, and is better undertaken by data analysts, 
elections systems experts, and counsel familiar with how the elections should be 
conducted and ballots configured. Plaintiffs expect the analysis to require 
hundreds of person hours of analytical and clerical work that is not appropriate or 
economically feasible for a computer security or voting system computer science 
expert. 10 The cost alone to Plaintiffs would be enormous. But neither do such 
experts have the time for such a substantial undertaking. Voting system experts, 
such as Alex Halderman and Matthew Bernhard, will assist in the technical aspects 
of forensic reviews, but they cannot alone perform the clerical analysis of data in a 

10 For the Coalition Plaintiffs, Coalition Plaintiff William Digges III, who also has 
substantial database experience, will lead this review. 
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database, or testing tallies, or the comparison back to hundreds of paper records. 
Nor is it appropriate to expect them to do such clerical work. 

Analysis of the data and configurations found in the GEMS databases by 
Plaintiffs may pinpoint configuration mistakes or evidence of more fundamental 
systemic flaws or vulnerabilities in the databases or election system, flaws that will 
need further forensic analysis of the databases or the GEMS servers themselves. 

For the foregoing reasons, the Court should order the Secretary to produce 
the GEMS databases immediately without any confidentiality restriction. 

Respectfully submitted this 1 st day of July, 2019. 


Is/ Bruce P. Brown 

Bruce P. Brown 
Georgia Bar No. 064460 
Bruce P. Brown Law LLC 
1123 Zonolite Rd. NE 
Suite 6 

Atlanta, Georgia 30306 
(404) 881-0700 


/s/ Robert A. McGuire , III 

Robert A. McGuire, III 
Admitted Pro Hac Vice 
(ECF No. 125) 

Robert McGuire Law Firm 
113 Cherry St. #86685 
Seattle, Washington 98104-2205 
(253) 267-8530 


Counsel for Coalition for Good Governance 

/s/ Cary Ichter 

Cary Ichter 

Georgia Bar No. 382515 
Ichter Davis LLC 
3340 Peachtree Road NE 
Suite 1530 

Atlanta, Georgia 30326 
(404) 869-7600 
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Counsel for William Digges III,Laura Digges, Ricardo Davis and Megan Missett 

/s/ David Brody 

David Brody 
John Powers 

Lawyers’ Committee for Civil Rights 
Under Law 

1500 K St. NW, Suite 900 
Washington, DC 20005 
202-662-8300 

dbrody @lawyerscommittee. org 
Counsel for Coalition Plaintiffs 
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7s/ David D. Cross 


David D. Cross (pro hac vice ) 

John P. Carlin ( pro hac vice ) 

Jane P. Bentrott (pro hac vice) 
Catherine L. Chappie (pro hac vice ) 
Robert W. Manoso (pro hac vice) 
Morrison & Foerster LLP 
2000 Pennsylvania Avenue, NW 
Suite 6000 

Washington, DC 20006 

Telephone: (202) 887-1500 

DCross@mofo.com 

JCarlin@mofo.com 

RManoso@mofo.com 

CChapple@mofo.com 

JBentrott@mofo.com 

Halsey G. Knapp, Jr. 

GA Bar No. 425320 

Adam M. Sparks 

GA Bar No. 341578 

Krevolin & Horst, LLC 

1201 West Peachtree Street, NW 

Suite 3250 

Atlanta, GA 30309 

HKnapp@khlawfirm.com 

Sparks@khlawfirm.com 


Counsel for Plaintiffs Donna Curling, Donna Price & Jeffrey Schoenberg 
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CERTIFICATE OF COMPLIANCE 

Pursuant to LR 7.1(D), I hereby certify that the foregoing document has 

been prepared in accordance with the font type and margin requirements of 
LR 5.1, using font type of Times New Roman and a point size of 14. 

/s/ Bruce P. Brown 

Bruce P. Brown 
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CERTIFICATE OF SERVICE 

This is to certify that I have this day caused the foregoing to be served upon 
all other parties in this action by via electronic delivery using the PACER-ECF 
system. 

This 1 st day of July, 2019. 

/s/ Bruce P. Brown 

Bruce P. Brown 
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FOR THE PLAINTIFF COALITION FOR GOOD GOVERNANCE: 
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3 

PROCEEDINGS 

(Atlanta, Fulton County, Georgia; June 28, 2019.) 

COURTROOM DEPUTY CLERK: Good afternoon, everyone. 
We're here for the teleconference in the case of Curling, et 
al. vs. Raffensperger, et al., Civil Action Number 17-CV-2989. 

Beginning with the Curling plaintiffs, would counsel 
please introduce yourselves for the record. 

(Unintelligible.) 

MR. SPARKS: This is Adams Sparks with Krevolin & 
Horst also for the Curling plaintiffs. 

COURTROOM DEPUTY CLERK: Okay. We are not able to 
hear. Are we on cell phones? 

MS. CHAPPLE: We are not -- we are on -- is that a 
little better? I'm leaning over the phone. 

COURTROOM DEPUTY CLERK: That's actually a whole lot 
better. If you would please make your appearance again. 

MS. CHAPPLE: This is Catherine Chappie with Morrison 
Foerster. David Cross is also on the line from Morrison 
Foerster. I have with me in the room Dr. Alex Halderman. And 
on the line is also Adams Sparks with Krevolin & Horst. We're 
all on the line for -- 

MR. KNAPP: Halsey Knapp is here as well. 

THE COURT: So Halsey was clear. When Catherine was 
speaking -- this is Judge Totenberg -- it was a -- excuse me 
for using your first name. But it is the easiest at the moment 


UNITED STATES DISTRICT COURT 
OFFICIAL CERTIFIED TRANSCRIPT 



1 

2 

3 

4 

5 

6 

7 

8 

9 

10 

11 

12 

13 

14 

15 

16 

17 

18 

19 

20 

21 

22 

23 

24 

25 


Case l:17-cv-02989-AT Document 441 Filed 07/01/19 Page 27 of 443 

4 

on a Friday afternoon. It was -- there was a whole side 
buzzing. 

MS. CHAPPLE: Was there? Okay. I'm sorry. Your 
Honor. I will try to call back in using another -- another 
phone. 

THE COURT: Okay. Thank you. 

MS. CHAPPLE: Okay. Just one second. 

(There was a brief pause in the proceedings.) 

COURTROOM DEPUTY CLERK: I'm sorry. Who is speaking? 

Hello? 

MS. BURWELL: Hello. This is Cheryl Ringer and Kaye 
Burwell from Fulton County. All of a sudden, our phone kind of 
went silent. 

COURTROOM DEPUTY CLERK: No, ma'am. We were just 
waiting on Ms. Chappie to come back on. 

MS. BURWELL: Thank you. 

COURTROOM DEPUTY CLERK: Who do we have on the line 
for the Coalition? 

MR. BROWN: Hello. This is Bruce Brown. And also on 
the line is Matt Bernhard, our expert, and my client, Marilyn 
Marks. 

COURTROOM DEPUTY CLERK: Okay. Thank you, Mr. Brown. 

State of Georgia? 

MR. RUSSO: This is Vincent Russo. I have here with 
me Josh Belinfante. We also have on the line Bryan Tyson, 
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Bryan Jacoutot, and Carey Miller. And we also have in here 
with us from the Secretary of State's office Merritt Beaver, 
the CIO of the Secretary of State's office, and Kevin Rayburn. 

COURTROOM DEPUTY CLERK: Okay. Thank you, Mr. Russo. 
And we have Ms. Ringer and Ms. Burwell on for Fulton 

County. 

MS. BURWELL: Yes. 

MS. CHAPPLE: Hello, this is Catherine Chappie and 
Dr. Halderman. We just called in from my office. 

COURTROOM DEPUTY CLERK: Sounds much better. Thank 
you, ma'am. 

MS. CHAPPLE: Perfect. Thank you very much. 

MR. CROSS: This is David Cross. I'm on for the 
Curling plaintiffs as well. 

THE COURT: All right. This is Judge Totenberg. 

Good afternoon. I'm going to deal with the issue -- the 
substantive issues before you get to the protective order. 
Though I understand that there is a strong connection between 
the two. And arguably some of the issues might be resolved if 
you had resolved the protective order issue. 

But let me at least get a sense of the issues at play 
with the -- on the merits of the request for production. I 
don't -- let me just ask the first question. Why is it that 
the plaintiffs need the entire state GEMS database? 

MR. BROWN: Your Honor, this is Bruce Brown for the 
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Coalition plaintiffs. The GEMS database is an application 
system that the Secretary of State sends to each of the 
counties after building the ballots at the Secretary of State's 
office. And it is the GEMS database that contains fields and 
tables. And it is the mechanism by which the GEMS system 
accesses the information from a voter when a voter votes. 

So the GEMS database -- it is by no means the entire 
state system. It is just one piece of it. It is the low 
hanging fruit in a way in that it gives a good overview of the 
application, and it is very easy to produce -- physically easy 
to produce. It is simply a CD for each county. 

And our experts understand that it is the best first 
thing to review when trying to look for defective programming. 
And the GEMS database is a -- there is no source code. There 
is no proprietary IP involved. It is a public record in other 
states, though not in Georgia. Examples of GEMS databases are 
on the internet. And a GEMS database for the State of Georgia 
was one of the files that Logan Lamb had access to when he had 
access to the web server at KSU in 2016. 

And so it seems to be a good place to start on the 
discovery. We sent this discovery out in March actually even 
before the discovery period began. And one of the reasons why 
we sent it out was to get a start on lining up the forensic 
work that would be necessary. There's many steps that follow. 
But this was a good first step. 
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MS. CHAPPLE: Your Honor — 

THE COURT: Just one second. 

Mr. Brown, let me ask you an additional just 
follow-up question, which was: Why would you need it for the 
entire state as opposed to the CDs of the database for a 
selective -- a representative number of cities and counties 
associated also with those that are having elections? 

MR. BROWN: I will give -- I will give you one 
advantage. We have seen aberrant vote totals in many 
counties -- 

THE COURT: You had seen -- I'm sorry. You had seen 

what? 


MR. BROWN: Aberrant vote totals that appear in some 
counties that do not appear in others. And so one of the ways 
of trying to detect a defect in the programming, innocent or 
not, would be to compare the database that was sent to County 
A, for example, with the database that was sent to County B. 

And it is also -- on just the burdensome issue. Your 
Honor, we're just talking about CDs. It is not -- it is not a 
very taxing production effort to produce the databases for the 
different counties. It is just (unintelligible) or any sort of 
forensic type of work involved in the production. 

THE COURT: Keep close to the mic on your phone 
because you're coming in and out. I understand you. But the 
court reporter cannot get it with enough consistency to be able 
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to -- 

MR. BROWN: Thank you, Judge. I apologize. We're in 
Athens. We just took a deposition in this case, and so I'm 
speaking on a cell phone. I apologize. 

THE COURT: Okay. Well, Ms. Chappie, was that you 
trying to speak? 

MS. CHAPPLE: Yes, Your Honor. Thank you. This is 
Catherine Chappie. I wanted to add two things to what 

Mr. Brown was saying. 

First is that the GEMS system is the ideal -- is an 
ideal infection point. And so it is also a place that we would 
like to look for malware on the machine -- within the system. 

And then, second, that the Curling plaintiffs would 
like more than just the CDs that Mr. Brown is referencing. We 
would like -- I'm actually looking at Dr. Halderman because I 
think he is in a better position to explain exactly what we are 
looking for if -- but -- and then he typed out a hard disc 
image of the server is what the Curling plaintiffs would like. 

THE COURT: And is that what you have actually 
requested as well? I know you would like it, but has that been 
the subject of an actual request? 

MS. CHAPPLE: I believe so. Your Honor. But I would 
need to look for the number of the request. 

THE COURT: All right. So just to save time -- 

MR. CROSS: Your Honor, this is David Cross. 
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THE COURT: Yes. 

MR. CROSS: I can help. It is Request Number 15. It 
is the one that we referenced in the notice that we sent in to 
join the call. It seeks all the underlying data on the GEMS 
server and in other respects. So the GEMS server is the only 
focus today. And we received an amended response from the 
state defendant this morning. The request indicating that they 
are not going to produce the GEMS database itself or any of the 
underlying data or image is how I read their response. 

THE COURT: All right. So does Dr. Halderman wish to 
explain the need for this from your perspective or his 
perspective? 

DR. HALDERMAN: Yes, Your Honor. So the GEMS 
database or the GEMS server -- excuse me -- is essentially the 
nexus of the whole election system. This is a place from which 
ballot programming is being produced and distributed down 
through the counties to the voting machines throughout the 
state. 

So that positioning makes it an ideal point for an 
attacker to begin an infection that they would try to spread to 
voting machines in the field. We would like to be able to 
perform forensics on the GEMS server to see if there is 
evidence that such an infection did occur. 

THE COURT: All right. So the state indicates it has 
made other alternative suggestions in place of these requests. 
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I don't know what those are. But I'm trying to, first of all, 
just determine: Did you actually sit down and discuss any of 
those? Did you have any of your experts talk with the chief 
technology officer for the Secretary of State's office, Merritt 
Beaver, or what did you do? 

MR. BROWN: Your Honor, this is Bruce Brown. We did 
discuss the options. And the options -- there were a couple of 
things discussed with the state. The first was we made 
repeated requests to the state to identify the fields and the 
tables in the database that they contended contain sensitive 
information but they did not want to disclose. 

And the state refused to identify the fields taking 
the position it said that it was the entire architecture of the 
database that was proprietary. The next thing that we 
discussed was their offer to produce certain printed reports 
that would be generated by the GEMS database pursuant to the 
GEMS database report function. Just like most applications, in 
addition to all the computing functionality they have, they 
also have a piece that will let you select data and report it 
anyway you want to. 

Our experts are on record as saying that that 
production of reports generated by the GEMS database may be 
interesting and it may also be subject to discovery but it is 
many orders of magnitude removed from any kind of effort to 
determine if there's defective underlying programming. You 
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would have to take a PDF of a report. 

So those were the two areas that we discussed. And, 
frankly, I think it is fair to both sides -- to both sides that 
we are at a pretty fundamental disagreement over the discovery 
of the GEMS database. We have advanced it to a point where it 
is appropriate to seek Your Honor's guidance. 

THE COURT: Well, does anyone on the plaintiffs' side 
want to explain why their offer of the report would -- while 
not the full monty would be still not -- and I understand it is 
not. But why wouldn't it be sufficient from your perspective? 
Is that Dr. Halderman who is going to be -- 

DR. HALDERMAN: Yes, Your Honor. I can explain. 

What a report from GEMS covers is -- it is essentially a 
summary of some of the kinds of data in the system. But it 
does not tell us about the -- about the underlying programming 
essentially that is going to be affecting the way -- the way 
votes are counted. Nor does it tell us about potential 
corruption to the database itself that could be used as a means 
of infecting or altering the behavior of the system. 

I would also like to add that our request for the 
hard disc image for this server I had said was to allow us to 
identify whether infection had occurred. I should have added 
that it will also allow us to evaluate vulnerabilities in the 
system that could provide a way to infect the system and 
manipulate elections using the GEMS server as an infection 
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point. 

THE COURT: I understand some of this. But the 
plaintiffs provided me with a copy of the 2007 decision from 
Arizona -- from an administrative judge in Arizona. And, of 
course, that was pursuant to an Open Records Act request. But 
in that case, which was -- I'm sorry. It was in front of the 
superior court judge. But it was Democratic Party of Pima 
County vs. Pima County Board of Supervisors. And I guess there 
was an administrative judge involved also who was writing the 
initial decision. 

The judge found that the database should be made 
available but not the programming because of the concerns about 
security and security of the election-related functions. And 
so it seems like the Coalition is willing to forgo having -- 
obtaining that, the programming information, and just wants the 
database and the Curling plaintiffs want both. 

Is that a correct summary? 

MR. BROWN: Your Honor, that's a correct summary as 
of this moment. This is Bruce Brown for the Coalition. I'm 
sorry. But this was our first very limited narrow request, and 
we would eventually also seek the disc image of the servers -- 
there is more than one -- and pursue what Dr. Halderman 
suggested. 

So we teed up the dispute resolution process over 
this very narrow limited request that we made first. And 


UNITED STATES DISTRICT COURT 
OFFICIAL CERTIFIED TRANSCRIPT 



1 

2 

3 

4 

5 

6 

7 

8 

9 

10 

11 

12 

13 

14 

15 

16 

17 

18 

19 

20 

21 

22 

23 

24 

25 


Case l:17-cv-02989-AT Document 441 Filed 07/01/19 Page 36 of 443 


13 

Curling came in with a broader -- broader request. So we have 
technically joined their request as well. But in terms of the 
dispute resolution process, we are here before you on the GEMS 
database. And so that is what our request today concerns. 

MS. CHAPPLE: Your Honor, this is Catherine Chappie 
for the Curling plaintiffs. Yes. Yes, that is what we're 
asking for. And we feel that a protective order should be 
sufficient to protect and allay the concerns of the defendants. 

We also asked them when we met a couple of weeks ago 
at the Rule 26(f) conference to identify what issues would be 
inherent in our request, what they were willing to give us and 
what they could not give us. And we still have that offer 
open. But we have not heard from them as to specifics that 
would allow us to tailor our request any further. 

THE COURT: Well, the way I understood it from the 
state's statement of its position was they felt that you were 
not interested, you weren't going to consider any alternatives, 
which might be so. I don't know. But you saw that as well? 

MS. CHAPPLE: Yes, Your Honor. Our position was that 
we don't have the access to the information about the system to 
know what is involved and what they could give us that they 
might be comfortable with that would be sufficient for us to be 
able to respond without more information from them. 

So it is not -- it is not that we aren't interested. 
It is that we don't have enough information to know whether we 
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would have an interest. 

THE COURT: Well, what have you-all done to have 
Dr. Halderman talk with Mr. Beaver or somebody else designated 
by the state so that you could explore that very question? 

MS. CHAPPLE: Your Honor, that is a good suggestion, 
and we would be open to a conversation like that. 

MR. CROSS: Your Honor, this is Davis Cross. I guess 
the one thing that I would offer is we don't have a lot of 
time. 

THE COURT: No. I know that. 

MR. CROSS: We want to be efficient. My concern is 
what we have heard from them so far and what they have offered 
up in terms of these reports, which we have talked through with 
Dr. Halderman, obviously are inadequate. If there is a way to 
work this out to where we get the data and we get it quickly, 
certainly we're willing to explore that. 

But we have not heard anything from them that would 
suggest that they are looking to give us anything other than 
what sounds like are just one-off reports or snapshots of data 
as Dr. Halderman explained won't do the job. 

As Bruce pointed out, there are two things in the 
database itself. There is the forensic image. If we can get 
the database, that is a start. But I will add the reason why 
we put them together is because, as Dr. Halderman has explained 
to me, there is not a substantive difference. But if they give 
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us the database, there is nothing else sitting on there that a 
forensic image has any greater sensitivity to. 

So our view is let's just do it in the most efficient 
way, which is take a forensic image of the server -- multiple 
servers as it may be. We get the substantive data. But we 
also get the additional forensic -- the whole comprehensive 
image that allows the expert to do the forensic analysis, which 
is really at the core of this case, rather than doing it 
piecemeal. 

Because at the end of the day, again, the forensic 
image is going to contain the same substantive data as the 
database itself. But we'll take it in whatever steps we can 
get it. 

I just haven't heard anything in the number of 
conversations we've had with Mr. Russo's team that they are 
willing to give us anything remotely close to what our experts 
need. So I'm just not convinced that further conversations are 
going to get us there. But we'll explore that obviously if the 
Court wants. 

THE COURT: Who is going to speak on behalf of the 

state? 

MR. TYSON: I will. Your Honor. This is Bryan Tyson. 
We have had some conversations. I think it is important to 
note that we have not had a situation where Dr. Halderman has 
been able to speak to Mr. Beaver -- something we suggested -- 
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about how to accomplish this. 

I think the plaintiff has correctly identified that 
this is the nexus to the election system. It is the most 
critical infrastructure we have in terms of our election 
system, which is why we are so careful with releasing it and 
don't want to release it to someone who could -- or I think the 
reality is when you take the database itself -- I'll start with 
that and then go to the rest of the server. 

If someone had the database, they could see the 
relationships between the various data inside the database. 

And if someone was trying to design malware, they would need 
that information to do that. Georgia has a slightly different 
version of a GEMS database than other states. And as a result, 
an attacker without the knowledge of the structure of the 
database can't -- is going to have a harder time designing 
something. 

In addition, there are other non- -- other 
confidential information like the particular numbers assigned 
to candidates. And if you're going to try to manipulate votes, 
you have got to know the candidate numbers and the placements 
to be able to do that. That would also be revealed in the 
database. 

So from our perspective, the plaintiffs' desire to 
look for malware can be addressed through several other means 
that we have been working towards. The first obviously was the 
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reports. So look for anomalies there. We understand the 
plaintiffs don't like that option. We have a software called 
GEMS Verify that checks the executable files of the GEMS server 
against a trusted version of the GEMS -- of the GEMS executable 
files that we can run on the database and ensure that the 
executable files have not been altered in any way and share 
those results with the plaintiff. 

We also have from our understanding from our computer 
science folks and others an Access database, which is what the 
database is that the plaintiffs are seeking. The only malware 
that could reside in the Access database -- so, you know, the 
executables of the server files are one thing. Check those 
with GEMS Verify. 

The database can only have malware through a macro 
inside the database. And we would be more than happy to 
provide the plaintiff with all of the macros if we find any 
that are currently in the GEMS database. 

We think that addresses their concerns. It lets them 
look at the -- see that server files have not been altered and 
also see that the database does not have macros in it without 
having to reveal the structure and the relationship of the 
database and all that is inside there. 

THE COURT: Well, I guess — 

MR. BROWN: Your Honor, if I may, this is Bruce 

Brown. 
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THE COURT: Let me just stop y'all for a second. I 
have a general idea of what you are speaking about. But it 
obviously would have been better if Mr. Halderman -- 
Dr. Halderman had -- and Mr. Beaver or his representative had 
spoken before this conversation so that we're not just playing 
it out in kind of rigid lawyer form now rather than their 
having really talked and seeing if there is anything else. 

I understand that what the plaintiffs want is what 
they think is ultimately necessary. And I'm not dismissing 
that. But at the same time, there is some concern about 
proportionality that I have particularly in that we're going -- 
the state is moving to a different data system. 

I realize that it all may fall apart. But, 
nevertheless, that is not the expectation, and I can't operate 
on that expectation. So I'm looking at the amount -- the 
number of elections we have, the nature of the elections. And 
I'm saying I have some proportionality concerns and what -- are 
there any work-arounds at all at this juncture, even though the 
ideal might be from Dr. Halderman's perspective and the 
plaintiffs' perspective something else? 

Is there anyway I could persuade you-all to put the 
two of them on the phone for 15 or 20 minutes to talk? And we 
would -- I mean, I'm not saying that you-all can't be present. 
But that they are actually talking. I mean, I would have hoped 
that that would have happened. But it hasn't happened. 
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Is that -- is that feasible? 

MR. TYSON: For the state, Your Honor, we would be 
more than happy to make Mr. Beaver available. 

MR. CROSS: I thought Mr. Beaver was with you guys. 
Can we do that now? 

MR. TYSON: Yeah. And we're fine to have the 
discussion now or with Dr. Halderman directly. We're very open 
to that. 


MR. BROWN: We are -- Your Honor, this is Bruce 
Brown. Our expert would like to participate as well. 

THE COURT: Yes. I'm sorry. I missed what the name 
of your expert was. 


MR. BROWN: It is Matt Bernhard. 

THE COURT: Right. I remember the affidavit now. 

All right. Well, why don't I get off the phone and 
you-all -- I can go even on mute if you want to. But that is 
an extra -- which is -- which is fine. But you could also 
arrange it differently and call each other. But I don't know 
who has a line there, and then you-all have to get connected 
again. 


But why don't I just go on mute. Then when you are 
ready to -- you can -- you can always then have them talk 
separately or whatever you want to do. You can make the 
arrangements. And then when you are ready to actually talk, 
you can email Mr. Martin as soon as you are ready to talk and 
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he will be looking every few minutes at the -- at his email to 
see that you are ready. 

MS. CHAPPLE: Thank you, Your Honor. 

THE COURT: All right. Very good. Thanks. All 
right. I'm going on mute now. But you are still connected. 

(A brief break was taken at 2:38 P.M.) 

THE COURT: Hello. This is Judge Totenberg again. 

MR. CROSS: Hi, Judge. 

MS. CHAPPLE: Hi, Judge. 

THE COURT: So did you make any progress? 

MR. CROSS: I'm not sure we made much progress. Your 
Honor. We had a lot of discussion. Where we ended up was 
Mr. Brown on behalf of plaintiffs proposed a compromise in 
limiting the data down to 25 of 159 counties. We would choose 
those counties. So it would be a much smaller sample, which I 
think was one of the things Your Honor had suggested. 

We also agreed that we would adhere to similar 
security protocols that the state has in place for each of the 
159 counties, which also have a copy of this system and run 
that system to address their security concerns. And we offered 
any other security protocols that they would offer. 

The end result was they would not offer, as I 
understood it, anything more than they had originally offered. 
Although they proposed something additional concerning macros. 

But where we seem to be divided on really is the 
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issue of security. Their position seems to be that they won't 
produce the GEMS database, either the database itself for a 
forensic image or what are called MGB files under any 
circumstances because it sounds like they just don't trust our 
experts to keep that secure, even though we have offered again 
to abide by the same or similar protocols as the 159 counties. 

I'm not sure where we get at the end of the day. The 
other challenge was Dr. Halderman asked Mr. Beaver whether -- 
if he wanted to conduct the same sort of analysis that we are 
trying to do that our experts have described to look for 
malware in the system, to identify vulnerabilities with respect 
to the system, is there an alternative approach, is there 
something less that he would look at beyond what we have 
requested. And Mr. Russo would not allow him to answer that 
question. 

So we seem to be at an impasse. I wish I had a 
better answer. 

THE COURT: Let me just -- go ahead. Who is that? 

MR. TYSON: On behalf of the state. Your Honor, I 
just wanted to give a little bit different view. I'm not 
surprised we disagree on this. But the scenario really comes 
down to Dr. Halderman and the plaintiffs, even if they are 
narrowing the number of counties, they are still insisting on 
the actual raw Access database file. And those are the ones 
that show the structure and reveal the structure on everything. 
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So that doesn 

t meet our main concern. 

The 

other challenge where the databases are located 


in other places, the counties don't have the same kinds of 
tools that they would be using and other things that are 
happening. 

And to Mr. Cross' characterization that Mr. Beaver 
was refusing to answer or we wouldn't allow him to answer, the 
questions were turning into a cross-examination and a 
deposition of whether Mr. Beaver would concede certain points. 
That is why we decided to come back to you to just go ahead and 


address this. 

I want to be clear about where we were. 

THE 

COURT: Okay. So -- 

MR. 

CROSS: Your Honor, the question was posed by 

Dr. Halderman 

If we could get an answer to that question on 


this call, I think that would help us go a long way. It was 
not a cross-examination. 


THE 

COURT: Well, I guess the question -- 

MR. 

CROSS: It was a conversation between the 


parties. 


THE 

COURT: All right. I'll get to that in a second. 

All 

right. I'll just myself ask if there is any 

alternatives. 

But I guess just -- I wanted to ask about the 


database itself. I'm not clear why as the database itself the 
defendant is not willing to provide that on a CD as Mr. Russo, 
I believe, you conceded to Adele Grubbs in the Superior Court 
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of Cobb County, I guess it is, that the database itself was 
public record. It was the programming that was not -- that you 
maintained. 

MR. RUSSO: Your Honor, I mean -- this is Vincent 
Russo. Our concern with the database has always been that it 
is a roadmap to being able to -- for anybody who wants to 
conduct -- try to put any malicious -- for putting malware on 
the system, the database is the roadmap. And I think the 
plaintiffs have said so much. 

What we have offered is the macros. That, you know, 
if there was -- if there was some -- there was some malware in 
that -- might have been in that database, it is our 
understanding that is where it would exist. In addition to on 
the servers, which are the additional reports that we offered 
to run, it is a test. It is called the GEMS Verify test that 
would check the servers to see if there were any files that had 
been changed. 

So those two together provide them with the 
information that is proportional and without necessarily 
providing the roadmap that someone would need to write -- write 
malicious -- you know, malicious software. 

MR. CROSS: Your Honor, David Cross, if I may. 

(Unintelligible crosstalk.) 

THE COURT: One person. I know you can't all see 
each other. But wait until Mr. Russo is really complete. 
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MR. RUSSO: So it sounds like my co-counsel, Bryan 
Tyson, was going to add something to that. 

THE COURT: Okay. 

MR. TYSON: Yes, Your Honor. I'm sorry. Just very 
briefly. Bryan Tyson. I just wanted to also make the point 
that in front of Judge Grubbs the plaintiffs made the same 
argument that they are making here. And Judge Grubbs -- the 
state took a consistent position. Judge Grubbs did not allow 
them to have the database files after a similar argument and 
believed that the reports that were offered, which was our 
first offer to the plaintiffs here, were sufficient. 

I know the plaintiffs disagree about that. But it 
was the same argument, and the state took the same position 
that we can't give you the actual database. 

THE COURT: All right. 

MR. CROSS: Your Honor, this is David Cross, if I 
may. Mr. Russo's argument really highlights and I would say 
implicitly concedes the point, which is he says the database is 
the roadmap if someone wanted to hack the system. Well, that 
is our point. Your Honor. 

The only way to evaluate the infection points as 
Dr. Halderman describes them and to identify the 
vulnerabilities is to see that roadmap, what a hacker would 
would want to see. The hacker -- the way that they would 
navigate that roadmap to get into the system. 
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What they are offering, as I understand it, is a 
small subset of data. Dr. Halderman has explained in detail 
why it is not sufficient. But one of the things that Mr. Russo 
said, as I understand it, that might let us see if there is 
existing malware in a small portion of the database. Again, 
that doesn't get us where we need to go, which is assessing 
whether there is malware in other portions of the database but 
also to the broader point of what the vulnerabilities are 
because the focus of our case is not just that there's already 
malware there but that the vulnerabilities themselves are so 
severe as to vitiate the right to vote in the State of Georgia. 

And I would say Mr. Russo seems to be conceding the 
point. Although he doesn't obviously intend to. The roadmap 
is what we need to see. 

The last point of this. Your Honor, on this issue of 
security, which really seems to be their only objection here, 
we have not heard anything from Mr. Beaver or from them that 
the analysis that needs to get done here can be done on less 
than what we have requested, which again has been narrowed 
quite significantly. 

The last point is Dr. Halderman deals with some of 
the most sensitive data all the time. He is one of the leading 
experts in this field. He deals with cryptographic protocols 
affecting tens of millions of websites. This is what he does. 
They have specific facilities at the University of Michigan to 
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deal with highly sensitive data. 

Mr. Bernhard actually is also at the University of 
Michigan. So they would have access to similar facilities. I 
will offer as a last resort -- Dr. Halderman may kick me for 
saying this -- if we had to actually go to Georgia in some 
facility they set up, it would be difficult. It is not ideal. 
It would, I gather, hinder the analysis. But we could explore 
that, if it is necessary. 

But the bottom line is their objection is one of 
confidentiality. And that is dealt with with the protective 
order, and we're talking about experts that deal with equally 
similar, if not more, sensitive data in the regular course of 
their work. 

THE COURT: Let me ask this. The GEMS database 
itself -- I just want to confirm -- is going to still be the 
foundation to draw on when you -- when the state moves on into 
the next -- the ballot marking device system or not? 

MR. RUSSO: That is correct. Your Honor. When the 
state moves to the new system, they will not be using the GEMS 
database. 

THE COURT: All right. And what will be used -- it 
will not be using it you are saying? 

MR. RUSSO: That is correct. 

THE COURT: All right. And how will the data be 
transferred? I don't obviously mean all the nitty-gritty 
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details. But is there anticipated a transfer of all of the 
voter data? 

MR. RUSSO: I mean, I guess I can say we don't -- we 
don't have a system yet. So I don't know which system they 
will be using in lieu of the equivalent to a GEMS database. 

But, you know, there will be -- there will be something. I'm 
just not sure what it is. And they don't know either. 

THE COURT: All right. 

MR. RUSSO: Until they know the vendor, they won't 
know what that will look like. 

THE COURT: What again is the date by which the 
vendor is going to be selected? 

MR. TYSON: I believe that was supposed to be 
mid-July. But I don't know what the current timeline is. I 
think they are still on track on that. I'm not certain, Your 
Honor. 

MR. RUSSO: I was just confirming. They are still on 
target for the original timeline. 

THE COURT: Okay. So I think that the question 
was -- and I don't see it just as a rhetorical question. But I 
understand why counsel for the state prefers not to be -- have 
their -- Mr. Beaver directly questioned. And I don't want to 
be in that position of examining him either. 

But if there is -- why -- I would like to understand 
why -- given what you've projected, why do you think -- why 
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Mr. Beaver or the state believes that those are adequate 
alternatives, knowing what the purpose is in this case? It is 
not just -- of the analysis. 

MR. RUSSO: Just so we understand your question, 
you're asking why the macros and the GEMS Verify report are a 
sufficient alternative versus the entire -- producing the 
entire database? 

THE COURT: Well, the database for 25 localities, 
which I thought they had agreed on alternatively. 

MR. TYSON: Yes, Your Honor. This is Bryan Tyson. I 
think the important piece is we don't see a distinction between 
25 and the entire database because our concern is not the 
amount. Our concern is the structure. And if you produce even 
one database, you are showing the structure. So on that point, 
that is there. 

I think for us the GEMS Verify looks at the 
executable files that are in use on the server. The macro test 
within Access will show any code that can run. And so it 
covers that basis. I think the plaintiffs' view is that there 
could be something lurking deep inside the database. But that 
is our view in terms of the security risks that are associated 
with it verifying that the executables have not changed, 
verifying there is not anything else on the server that is 
obviously there. And verifying that there is nothing 
executable within the database covers the concerns about 
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malware. 

I understand the plaintiffs disagree. But that is 
our view of why that is a sufficient resolution short of 
exposing the relationships and the structure in the database. 

THE COURT: So, Mr. Brown and Mr. Cross and I guess 
to your experts as well, while it is obviously not what you 
think in full that you need -- and it is your burden of 
proof -- why wouldn't this at least begin to be helpful at all 
to you and your experts in proceeding so that at least it is a 
major first step or first and second step? 

MR. CROSS: Your Honor, I would suggest that 
Dr. Halderman handle that, if you don't mind. I think he can 
better articulate rather than hearing from the lawyers. And, 
frankly, I would suggest it is probably better that both sides' 
experts speak to you directly. 

Dr. Halderman, do you want to take that? 

DR. HALDERMAN: Yes. So the alternatives that are 
being proposed about looking for macros or using this hash 
verifier, they cover entirely different parts of the data than 
what we are talking about. What we're talking about is looking 
for -- looking for kinds of corruption or manipulation that 
could spread malicious code, which just wouldn't be revealed if 
they are there by these other tests in which I think are 
entirely plausible means for malicious software to spread from 
this nexus of the system to wide areas of Georgia. 
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And does that answer your question, Your Honor? 

THE COURT: Well, sort of. But the original request 
at least from the Coalition was just give us the -- basically 
give us CDs of the voter -- of the GEMS database. And as I 
understand the conversation is that the state's concern is that 
would identify the structure and information that goes to the 
sort of secure operation of the system and that you're hoping 
that it will though you don't think it is necessary but not 
sufficient from your perspective; is that right? 

DR. HALDERMAN: That is right. But if I may say, I 
think it can be argued that almost any information about the 
operation of the system could potentially aid an attacker. And 
that is why we're proposing to protect the data in the same way 
that we would protect -- that the counties already protect the 
data and even to take steps beyond that we routinely take to 
protect arguably even more dangerous data, if released, 
including that what we have taken in the past to protect actual 
flaws in the software running on people's voting machines. 

THE COURT: Well, why -- let me just segue for a 
moment on to the conflict over that protective order. Why is 
it that the plaintiffs' counsel cannot agree to the terms 
proposed by the defendants? 

I looked at it. And I understand that there is this 
disagreement about somehow a printout of the -- of the 
ballot -- the ballot results in some way on an individual 
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ballot basis. But there also seemed -- because that was 
allegedly already a public record -- had been yielded -- had 
been -- but I wasn't -- there seemed to be other concerns on 
the part of the plaintiffs that I didn't -- I really couldn't 
fully understand. 

MR. BROWN: Your Honor, this is Bruce Brown for the 
Coalition plaintiffs. And I think David -- the plaintiffs are 
speaking with one voice on these issues. And I note that the 
disagreement here is primarily with Fulton County. I believe 
the Secretary of State and the plaintiffs are largely in 
agreement on these terms. I could be mistaken. 

But one -- one issue is whether the protective order 
should have retroactive effect, meaning that it could cover 
documents that have already been produced without a 
confidentiality agreement and produced without a 
confidentiality stamp. 

THE COURT: And this is the one that we got a sample 
of; is that right? Or are there others like that? 

MR. BROWN: There are many others. There are -- 
there are scores of ballot image reports that we have that have 
been produced as open records. And there's simply no way that 
we can -- I can let my client agree to a court order that binds 
us to keep confidential an unspecified universe of documents 
that the state may later determine are confidential. 

And, frankly, in my experience you really never do 
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that. A protective order covers documents that are produced in 
discovery. It is a narrow set. It doesn't cover information 
sort of out in the world. 

THE COURT: And that has mostly been produced by 
Fulton County? 

MR. BROWN: No. Other counties -- today, we got a 
whole trove of the same documents from Bartow County. They are 
public. There is nothing secret about them. Your Honor. And 
so the counties are producing them as they should. 

THE COURT: All right. Is it only Fulton or the 
state also that is asking for this provision? 

MR. BROWN: I do not believe -- well. I'll let the 
state speak for itself. But I don't think the state was 
insisting on retroactive application of the protective order. 

MR. RUSSO: Your Honor, this is Vincent Russo. Our 
issue is we want to be able to -- if there is something 
produced in this case by a county, we don't have the ability to 
control the counties and what they are necessarily producing. 

In fact, Bartow County produced something today, and we didn't 
even know about it. 

And so we want to be able to mark that confidential 
when we do find out about it, if it actually needs to be 
confidential. And by allowing us to mark it confidential and 
if the plaintiffs then disagree, we can go through the dispute 
resolution process set out in the protective order. 
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But to just deem something that has been -- that has 
been produced now as deemed a public record and it is no 
longer -- we can no longer try to maintain the confidentiality 
over is our concern. And we think that the protective order 
has a process in it that if the plaintiffs disagree over 
confidentiality designation we can go through the dispute 
process in the protective order. 

MR. CROSS: Your Honor, I want to make -- 
(Unintelligible crosstalk.) 

MR. BROWN: I want to make sure the issues are clear 
because we are bleeding several issues together. The first 
issue is whether or not the protective order ought to have 
retroactive effect and to be able to cover a universe of 
information regardless of when or even whether it was produced 
by a party. And I think no protective order does that. And 
that it ought to be explicit that this one does not. That is 
the first issue. 

The second issue is whether or not it is explicit on 
the first page of the protective order that we have all agreed 
to that if a third party wants to designate something as 
confidential they may do something under the protective order. 
They may do it. 

What the state wants to be able to do is to sort of 
reach across the table and intercept documents that other third 
parties are quite willing to share with the public or with the 
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plaintiffs and to capture those sort of in mid-discovery and 
stamp them confidential. 

And I have never heard of that happening and don't 
know mechanically how that could ever happen. So we would 
strenuously object to that in that if somebody is releasing 
something that the Secretary of State doesn't want them to that 
is between the Secretary of State and whoever that third party 
is. They don't get to sort of intercept discovery like that. 
Then the third -- so those are the first two. 

The third has to do with the attorney's eyes only 
provision, which the Coalition plaintiffs don't want at all. 

It is not appropriate for this kind of information. There 
should be one singular confidential designation and that -- 

THE COURT: Well, let me just say I have never heard 
of an attorney's eyes only that was not attorney's eyes only or 
with their expert on the other side of it. I mean, you have -- 
with the greatest of respect to your clients, the fact is that 
they are committed activists in this area. And they have a -- 
hats off to them for their activities and their concerns. 

But they don't have the same obligations on them in 
terms of confidential information that you might or somebody 
who is a direct agent like an expert who works in a very secure 
field. 

MR. BROWN: Your Honor, let me explain sort of the 
background of that provision. We took the draft protective 
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order from the protective order that was entered in the Common 
Cause case. That was our template. And that had a similar 
provision that had two Common Cause activists on it. 

Like I said, we don't like the attorney's eyes only 
designation at all but figured, well, if we can get our client 
on there we didn't -- it wasn't as big a deal. So I'm just -- 
we're not going to fight over something that has no material 
impact. But that is certainly the source of the -- that 
agreement and the terms. 

We would much prefer not having an attorney's eyes 
only provision because an attorney's eyes only provision in my 
experience relates to trade secrets when the disclosure to the 
client itself causes damage. And confidentiality provisions 
are designed for information which damage does not happen when 
you disclose it to the other party. It happens when that party 
discloses it to the world. 

So it just sort of conceptually does not belong in a 
case other than trade secrets where you have got competitors 
suing each other. That is our background on the attorney's 
eyes only provision. 

THE COURT: Mr. Russo or Mr. Tyson, what is the 
concern about disclosing information to the plaintiffs' experts 
who work with secure data systems and secured data all the time 
and are very well aware of their obligations in this area and 
their own professional standing depends on maintaining those 
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obligations ? 

MR. RUSSO: Your Honor, this is Vincent Russo. I 
don't think with respect to the attorney's eyes only provision 
that we had a concern particularly with the experts. I'll 
defer to Fulton County on some of this issue. 

THE COURT: Well, let me just say -- let me just 
finish the data system. I mean, if you were to show the 
information to the -- the data system and the database that we 
were talking about, one or -- both or one like -- let's just 
start off with the GEMS database. 

Is there -- what is the reason you would believe that 
the plaintiffs' experts would expose you to hacking or would do 
something that would compromise themselves the system or create 
trouble? 

MR. RUSSO: Yes, Your Honor. I think our concern, of 
course, is that the information gets put on their server at the 
University or wherever they are working and someone else -- 
grad students end up taking that information and using it or 
leaves it exposed. And so then that information is out in the 
public sphere, you know, especially when we get into the GEMS 
database. 

Yes. We have talked about this -- it is the roadmap. 
And, you know, the whole point of keeping that information out 
of the public realm is so that nobody has the roadmap so they 
easily write or more easily write malware that could infect the 
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system. 

DR. HALDERMAN: May I -- this is Dr. Halderman. May 
I suggest respectfully that we could address those concerns, I 
believe, by analyzing the data on an air-gapped system in an 
independently secured room where others not related to the case 
wouldn't have physical access to it and where it would be 
electronically safeguarded against any kind of intrusion. 

MR. RUSSO: Can you repeat that proposal? 

DR. HALDERMAN: I think we can largely mitigate these 
concerns, at least reduce them below the threshold that the 
danger already exists in existing GEMS servers maintained by 
the state if we apply -- if we apply both a physically 
separated facility and a completely disconnected system. 

MR. TYSON: So essentially -- this is Bryan Tyson. 

So essentially duplicate our current setup in terms of how we 
protect the information? Card key access? I think Michael 
Barnes testified yesterday it is only five people. But I think 
that is consistent with our current setup. 

DR. HALDERMAN: Let's propose -- let's propose 
either a card key or an independently locked door on a separate 
security key from the rest of the building with a video camera 
on the work station and a disconnected work station. 

Would that be roughly equivalent or greater than the 
normal security that is applied? 

MR. TYSON: Merritt -- Mr. Beaver, do you want to 
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answer that in terms of what our current security is? I think 
that's less than we currently do. But it is close. 

THE COURT: Mr. Beaver, are you going to respond or 
are you going to talk to your counsel and at least respond via 
that way? 

MR. RUSSO: Yes, ma'am. Sorry about that. Go ahead, 

Merritt. 

MR. BEAVER: I think anything more than looking at it 
within our environment means it is out of our environment. No 
matter what people say, they have got to control -- we don't 
know what their controls are. But we can't -- I can't sit in 
front of a judge and say -- answer the question how could it 
have gotten out. If I said, well, I did release it, and they 
said it was safe but now I can't explain how it got out there. 

So anything less or anything more than looking at it 
in our environment would still leave us exposed. 

THE COURT: Are you able to make it available to the 
experts in your environment if they come -- I mean, do you have 
actual -- a capacity to do that? 

MR. RUSSO: Well, Your Honor, I think some of that 
would depend on are they looking to run software on the system 
or what kind of protocol would be around that process. Just 
look and our folks are there -- I think one of Judge Grubbs -- 
her points in the case before her, if we were going to let them 
look at stuff, our folks had to be the ones touching it. Their 
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folks couldn't touch it. At least the Coalition had agreed to 
that in that case also. 

But I think we would need to have some protocol 
around what they would be doing or whether our folks would be 
the only ones touching the system and they are just there to 
watch. 

THE COURT: Let me just say there are different 
focuses of this lawsuit versus a challenge in an election and 
also the time frame that she had to deal with. So I respect 
she did everything she could that she thought was proper in 
that time frame. 

But you don't -- I mean, let's say you made a copy of 
whatever you had as if you had another computer doing this so 
that it wouldn't in any way interfere with your functioning and 
your system. Could they do it basically in your quarters so it 
would be basically the same conditions? And maybe that is too 
much of a layperson's question. But I think you get the drift 
of what I'm saying probably. 

MR. RUSSO: So I'm trying to make sure I understand 
exactly what we're talking about here. So they would come -- 
they would be copying our system. I think we would have a 
concern with the copying. We would be copying. 

THE COURT: You would be copying. 

DR. HALDERMAN: It would create — 

(Unintelligible crosstalk.) 
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MR. RUSSO: We would create a separate duplicate 

system. 

DR. HALDERMAN: A mirror of the system -- the GEMS 
system. Hold on a second. 

MR. RUSSO: Your Honor, obviously our folks -- we're 
concerned we're expanding even farther where we were before 
because previously we were just talking about the GEMS 
database. Now we're talking about copying the system. 

THE COURT: I'm just -- let me just say I'm not 
trying to do any one thing. I'm trying to throw out some other 
ideas that could be massaged by people who understand the 
issues probably better than me and how to do this in a way that 
would satisfy some of your concerns but also actually deal with 
the gravamen of also what the plaintiffs' claims are. 

DR. HALDERMAN: Well, Your Honor, I gather that what 
you are suggesting -- I think it is potentially a reasonable 
proposal -- is to have a separate work station in a facility of 
the State of Georgia's under Georgia's control where we 
could -- the state could copy the data that we're asking for on 
to a separate system or machine and we could go in and perform 
the analysis ourselves on this independent computer there. 

And that way there is no -- then it would be 
protected to the same extent that it is in Georgia's existing 
system. Is that -- is that what you were suggesting? 

THE COURT: Yes. 
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DR. HALDERMAN: And I think we could perform the 
analysis under those conditions. Although I think we could, in 
fact, protect the data as well or better at our own laboratory 
facilities where we routinely do deal with extremely serious 
vulnerabilities in some of the internet's most -- most 
dangerous malicious software. 

But if the state insists, I think it would be 
possible to perform the analysis on an independently setup 
computer in their facility. 

MS. CHAPPLE: Your Honor, this is Catherine Chappie. 

I think we would also want to have assurance that they would 
give Dr. Halderman and Mr. Bernhard the access and time that 
they needed to do the analysis that they need to do. That it 
wouldn't be an instance where our experts were told that they 
only had a certain amount of time. 

THE COURT: These are details that we'll put off for 
now. All right. I mean, I understand that, the whole purpose 
of this, especially if he doesn't have the computer to work on. 
Yes. But let's just -- 

MS. CHAPPLE: Sorry, Your Honor. 

THE COURT: That is all right. I don't mean to jump 
on you about it. But I'm just trying to get any -- any sense 
of what could be done here. 

MR. RUSSO: Your Honor, I think we would want to get 
a better understanding of what they mean by perform the 
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analysis on the machine and what tools they expect to be 
introducing or -- I mean, we would be concerned about someone 
introducing anything into the machines. 

MR. BEAVER: It would have to be done based on what 
is in the environment. As soon as you introduce other tools, 
you, of course, bring the opportunity to bring something 
foreign into that environment. 

DR. HALDERMAN: Perhaps the state misunderstands the 
proposal. We're talking about having a work station available 
on which we can perform forensics and other tests on files 
provided to us by the state. 

MR. CROSS: And the key point just to add -- this is 
David Cross -- is this is a stand-alone work station. So it is 
not connected to the actual GEMS server. It would be whatever 
room the state sets up as a stand-alone distinct machine that 
is a mirror image of the GEMS server so that it wouldn't matter 
what tools Dr. Halderman or Mr. Bernhard bring in because they 
can only affect what is sitting on that stand-alone machine. 

It is not connected to the internet. You can't infect 
anything. 

THE COURT: Well, it sounds like that is a 
potentially reasonable alternative I have to say, and I'm not 
expecting everyone to make a decision on the spot on a Friday 
afternoon. But I am expecting you to think about it seriously 
and -- but I do want to address -- I guess that was 
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Mr. Beavers' comment. But it might have been Mr. Russo's 
comment. 

Are we talking about when he asked -- one of you 
asked, at least, were you talking about the GEMS database or 
were you talking about the actual other operational -- the 
server functioning? Is that what I understood you were asking, 
one of you at least? 

MR. RUSSO: Yes, ma'am. That is what we were trying 
to get an understanding of. 

THE COURT: All right. So knowing that -- I know 
that the plaintiffs would like the whole deal. But, 

Dr. Halderman and Mr. Bernhard, would it still be of value to 
you, first of all, to do it just simply with the GEMS database 
or not? 

DR. HALDERMAN: This is Dr. Halderman. The GEMS 
database would be of value to us. We would also like to 
examine the rest of the server configuration and the data on 
the GEMS server because the GEMS database is one in separate 
places where malware could reside if the state says it is sort 
of the nexus or the roadmap or the nerve center of the system. 
So that might be the first place that would be fruitful to 
examine. 

THE COURT: What if you were allowed to do -- look at 
the database and then they gave you whatever -- I mean, I 
realize it is not what -- all the things you want, not quite 
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understanding what the macros are, but as a supplement to that. 

DR. HALDERMAN: The macros are actually not a 
substantial utility to us. I presume that that is a standard 
check that the state runs in the normal course of business and 
that it has already shown that there is not an infection there. 

MR. CROSS: If I understand Your Honor's question 
right, if the question is is the database itself a valuable 
starting point, the answer is definitely yes. 

THE COURT: If you were to do it under those 
protected circumstances? 

MR. CROSS: Yes. I mean the short answer is yes. I 
guess I would want to explain though that, again, if we're 
going to go to the trouble of looking even just at the database 
on a stand-alone computer under the conditions we have 
described, I would ask. Your Honor, we should just go ahead and 
take the mirror image of the server because those conditions 
are so secure that there is no reason to break it up. And it 
is just going to create inefficiency and more work if we first 
look at the database in that situation and then later have to 
come back and create a whole new station that has the full 
configuration of the server. 

I mean, if we're going to go to those extreme 
conditions, I would respectfully ask that we just do it all at 
once and be done with it. If we're just getting the database, 
then I would submit we don't need to do the level of 
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protections that they are talking about. 

MR. BROWN: Your Honor, this is Bruce Brown. I have 
to concur with what Dave said to this extent. The GEMS 
database is set up in 159 counties. It is a public record in 
other states. It is not the kind of data that needs the 
protection anything close to what Dr. Halderman is describing. 

Now, in terms of it is an order of magnitude and that 
is why we chose it initially as the first thing that we wanted 
discovery on because we didn't want to fight this thing on a 
big forensic battle that, frankly, we had just gone through 
with them in the lieutenant governor's case. We thought let's 
just ask for the low hanging fruit, which is the GEMS database. 
That will be a good start to try to get an overview of the 
system and maybe spot some vulnerabilities or some 
configuration errors. 

And so it remains a good starting place. And we can 
get those by CD. We don't need to have a safe room or anything 
else. And we can evaluate them. And then that would probably 
speed up what substantive review that could be entertained or a 
concurrent review, even better, of the actual GEMS server. 

But I think the difficulty that we had in our 
discussion with the experts is that it is almost in a situation 
where if what we are seeking discovery of is likely to reveal 
malware or a vulnerability then the state is going to take the 
position that it is beyond discovery every time, not just for 
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the GEMS database. But you will see that in discovery in this 
case, I think, over and over again. 

And so that is not a position that we feel 
comfortable arguing because it just can't be so or else as 
Justice Nahmias said in our oral argument in the other case it 
is just this black box that the state gets to know how the 
votes are counted and no one else does. 

And so I think our discovery is limited. We have cut 
it back to 25. If they have particular fields, like personal 
information, that can be redacted. And we will treat them just 
as carefully as they require the counties to treat them. And 
whether that is done concurrently or in advance of making a 
full image of the GEMS database -- you know, Mr. Cross has got 
a good point. We'll take the GEMS database separately now. 

Thank you. 

THE COURT: Well, let me ask you this. We're talking 
about the actual functioning of the GEMS server and the way it 
operates. How further. Dr. Halderman, are you suggesting -- if 
you were to happen to be in their shoes, what would you want, 
in fact, to be able to protect -- when you have responsibility 
for protecting the system, what would you want under these 
circumstances ? 

They still have to run an election. Of course, it is 
always possible as the plaintiffs have pointed out that things 
won't be ready by the point of the primary or -- so it becomes 
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all the more important. So I may have unfairly put the shoe on 
your foot about it. 

DR. HALDERMAN: Yes. No. I think that is a fair 
question. And I think that although the -- the information -- 
the most sensitive risk is that information on the real GEMS 
servers will be changed, more so than information on the GEMS 
servers will leak. 

I think information on the GEMS servers needs to be 
protected. And I think that the protective order is a good 
place to work out the logistics of that. But the logistics to 
me, the most important things, are to ensure that the data is 
transferred in an encrypted way. Wherever it will be analyzed, 
that it is analyzed on a system that is physically secured and 
that physically secured system is disconnected from the 
internet, in addition to the controls that the protective order 
places on who would have access to that -- to that machine. 

But that seems like -- that is a fairly standard 
protocol for handling other kinds of dangerous or sensitive 
software that, if released, could cause harm. 

That is what we do to protect against -- to protect 
actual virus samples. That is what we do sometimes to protect 
the most severe vulnerabilities we discover is just make sure 
that they are stored in encrypted form, that they are kept on 
systems that are not connected to the internet, and to make 
sure that those systems are physically secured. 
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THE COURT: All right. Let me just -- we were on the 
protective order. And I had gotten everyone's position a 
little more fully on the retroactivity issue and the state 
wanting to assert an interest also to protect itself from the 
disclosure of a third party. 

I'm looking to see if there is anything else. I 
would like the state to think about this alternative that we've 
been discussing about the -- having this done in a state 
facility on a mirrored machine computer. And obviously there 
are two levels of this. And I hear what the plaintiffs are 
saying. And I'm not -- I haven't necessarily heard anything 
further from plaintiffs as to any sort of heightened obligation 
of security relative to the experts who are using -- might be 
doing this if they were actually looking at the server relative 
to your desire to include your clients in the loop about 
whatever they are doing. 

And I think that I would be -- it is really no 
disrespect to the clients. But I just -- I think under the 
circumstances I couldn't probably authorize that. I don't see 
any need to. I mean, the experts are going to do what they are 
going to do and be looking at it. 

But all of the details of all of that, as they are 
running it, doesn't seem to be essential to be sharing with 
clients until we -- obviously they will come to an opinion. 

And that is something else when we get to the point that I have 
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an expert opinion. 

MR. CROSS: Your Honor, this is David Cross for the 
Curling plaintiffs. We have no objection. We certainly 
understand and appreciate that. Our clients are fine with 
that. 

MR. BROWN: Your Honor -- 

(Unintelligible crosstalk.) 

MR. BROWN: Your Honor, our client has no need or 
desire to be a party to the examination of the server. If 
we -- if you -- if I could explain better what the GEMS 
database does, it is an Access database that is very much a 
user-oriented application involving elections and how elections 
are constructed. 

And the knowledge of my client in terms of that field 
of information is necessary for us to be able to review the 
GEMS database itself. And that is why we would need to have my 
client, Ms. Marks, included with any circle of people who were 
reviewing the GEMS database. It is also simply a matter of 
resources that we have to get this work done, quite frankly. 

THE COURT: Are you saying she would need to be in 
the room while they are looking at the database and they are 
running the tests on the database? 

MR. BROWN: She would not need to have -- 

THE COURT: So what are you saying? I mean, because 
it wasn't like you wanted a printout of the database. 
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MR. BROWN: I may not -- we may have to put something 
in writing to make sure it is clear. Because this is sort of 
overtaken a little bit of my own understanding of how you could 
view one and not the other. 

But what we would want Ms. Marks to have access to 
would be the functionality of the GEMS database, which is the 
same thing that a county clerk in Georgia would have access to. 
And we want to see the same thing that someone in an elections 
office in Morgan County would have access to. And they, of 
course, don't have access to the kinds of things that 
Dr. Halderman is talking about. So that would be sort of a 
rough way of explaining it. We would need it to be able to get 
our work done with our resources and would appreciate that. 

THE COURT: When it is made available in Morgan 
County -- and the state may be -- I assume can answer that 
question whether directly Mr. Beaver or his giving the 
information to counsel. 

What does that mean? Are they -- when the county 
elections officer is looking at it, is he or she looking at it 
on a computer and able to do all the things that Mr. -- that 
the plaintiffs want to do or are they looking at it -- pulling 
it up in some other less informative mode but that you can run 
it? 

MR. TYSON: Yes, Your Honor. This is Bryan Tyson. 

We had an extensive discussion of this in Mr. Barnes' 
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deposition yesterday. And the county election officials have 
separate GEMS computers that house the Access database. But an 
important distinction is that the county computers do not have 
Microsoft Access installed on them. So the county officials 
cannot open the database in Microsoft Access. 

They use the GEMS system that then provides the 
interaction to the Access database. But they do not and cannot 
open it because those computers are not connected to anything 
and Microsoft Access is not installed on those computers. 

THE COURT: Okay. So back to you, Mr. Brown. I 
mean, is that -- if you want to see it the way that the Morgan 
County elections is, then you would be looking at it and your 
client would be looking at it -- 

MR. BROWN: Well, I think — 

THE COURT: -- in a separate way without access -- 
without the -- 

MR. BROWN: What we would want is -- what we have 
asked for is to have it saved as a Microsoft Access database. 
Then we simply open it in Microsoft Access and be able to 
analyze it like that. 

THE COURT: Well, I just don't understand why your 
client has to be part of that, frankly. I mean, you originally 
say you want it just like the Morgan County head of elections 
is. But then you actually wanted something else, which is what 
basically I'm saying, well, I can understand why the experts 
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might need it but I'm not sure why that makes -- why your 
client has to be part of that process. 

All right. Well, you can all think about that. And 
the state should think what -- what we have been discussing. 

And I would like to know by 11:00 on Monday what your 
respective positions are. 

MR. BROWN: Thank you, Your Honor. We will brief the 
issue of who should have access and why to the GEMS database 
and also provide a little bit more information on the GEMS 
database and how it is helpful and should be disclosed. But 
thank you very much for your time. 

THE COURT: And if the state would indicate -- mull 
over what we have been discussing and indicate its -- its 
position as well by 11:00. 

MR. RUSSO: Yes, ma'am. We will do that. This is 
Vincent Russo. We will do that and follow up by 11:00. 

Should we just email your clerk, or would you -- 

THE COURT: You can file it under seal. I mean, it 
is just the simplest thing at this point given the subject 
matter. Everyone can file it under seal, and then we'll -- 
once I see it, then I'll decide whether all of it needs to be 
under seal. 

MR. RUSSO: Yes, Your Honor. 

THE COURT: And if there is something that is 
relevant from the deposition, I guess you'll need to file the 
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deposition. 

MR. RUSSO: Just so we fully understand here, you're 
referring to Michael Barnes' deposition? 

THE COURT: That is what I understood from the state 
was that there was a deposition that dealt with these issues. 

MR. RUSSO: Correct. 

THE COURT: Okay. I'm just looking at the protective 
order statement so I can see if there was anything else I 
needed to ask you about. 

All right. I think I have -- if there is anything 
else that arose today that you have further information about 
or a modified position on, please provide that for me. And if 
either of the experts have anything -- further clarification 
that they want to provide, they should -- you should attach an 
affidavit or from Mr. Beaver. 

All right. Thank you very much. Have a good 

weekend. 

MS. CHAPPLE: Thank, Your Honor. 

MR. BROWN: Thank, Your Honor. 

(The proceedings were thereby concluded at 4:25 
P.M.) 
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the said Court, held in the City of Atlanta, Georgia, in the 
matter therein stated. 

In testimony whereof, I hereunto set my hand on this, the 
29th day of June, 2019. 




SHANNON R. WELCH, RMR, CRR 
OFFICIAL COURT REPORTER 
UNITED STATES DISTRICT COURT 


UNITED STATES DISTRICT COURT 
OFFICIAL CERTIFIED TRANSCRIPT 




Case l:17-cv-02989-AT Document 441 Filed 07/01/19 Page 78 of 443 


E 

X 

H 

I 

B 

I 

T 

B 


Case l:17-cv-02989-AT Document 441 Filed 07/01/19 Page 79 of 443 


1 


1 IN THE SUPERIOR COURT OF THE STATE OF ARIZONA 

2 IN AND FOR THE COUNTY OF PIMA 

3 


4 


5 

DEMOCRATIC PARTY OF PIMA 

) 


COUNTY, 

) 

6 


) 


Plaintiff, 

) 

7 


) 


vs. 

) No. C2007 2073 

8 


) 


PIMA COUNTY BOARD OF 

) 

9 

SUPERVISORS, a body politic; 

) 


and BETH FORD, PIMA COUNTY 

) 

10 

TREASURER, in her official 

) 


capacity as Pima County 

) 

11 

T reasurer, 

) 

) 

) 

) (Hon. M. Miller) 

12 

13 

14 

Defendants. 

15 

16 

DEPOSITION OF 

: MERLE KING 


November 

8, 2007 

17 

9:02 

a. m. 

18 

19 

20 

21 

Tucson, 

Arizona 


22 
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23 MARY MEYER, R.P.R. 

Certified Reporter 50225 


24 

MEYER, LUMIA & ASSOCIATES 

100 North Stone Avenue, Suite 802 

25 

Tucson, Arizona 85701 

Ph (520) 623-1100 Fax (520) 623-2067 
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17 

18 

19 

20 
21 
22 

23 

24 

25 


1 APPEARANCES: 

2 

3 

4 

5 

6 

7 

8 
9 

10 

ALSO PRESENT: Mr. Jim March 

11 Mr. John Moffatt 

12 


Mr. William Risner, Attorney at Law 
Risner & Graham 

100 North Stone Avenue, Ste. 901 
Tucson, Arizona 85701 
For Plaintiff 


Mr. Thomas Denker, Attorney at Law 
Ms. Karen Friar, Attorney at Law 
Pima County Attorney's Office 
32 North Stone Avenue, Ste. 2100 
Tucson, Arizona 85701 
For Defendants 


13 
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14 


15 


16 


17 

100 

18 

Pima, 

19 


20 


Certified 


the 


21 

22 

23 

24 

25 


4 


1 

2 

testified 

3 

4 

5 

6 
7 


BE IT REMEMBERED that pursuant to Notice of 
Taking Deposition in the above-styled and numbered 
cause, of the deposition of MERLE KING was taken upon 
oral examination at the offices of Risner & Graham, 

North Stone Ave., in the City of Tucson, County of 

State of Arizona, before me, Mary Meyer, RPR, 

Reporter 50225, in and for the State of Arizona, on 

8th day of November, 2007, commencing at the hour of 
9:02 a.m. on said day. 

* * * * 


MERLE KING, 

having been first duly sworn, was examined and 

as follows: 

EXAMINATION 

BY MR. RISNER: 

Q. Tell the judge your name. I'm not sure if that 
got on the record. 
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8 

A. I'm Merle King. 

9 

Q. And I want to ask you a little about your 

10 

background. So, would you describe your educational 

11 

background. 

12 

master 1 s 

A. I have a bachelor's degree in biology, a 

13 

in business administration, and a master's in business 

14 

information systems. 

15 

Q. And where did you get this business 

16 

administration, business information systems master's? 

17 

I mean — 

18 

A. Georgia State University, Atlanta, Georgia. 

19 

Q. In what year? 

20 

A. 1989. 

21 

Q. And if you could give me some work history, 

22 

please. 

23 

A. I am an associate professor of information 

24 

systems. I've been in the professorate since 1979. I 

25 

and 

am past chair of the Department of Computer Science 


1 

Information Systems, and currently the executive 

2 

director of the Center for Elections Systems. 

3 

Q. And as an associate professor, that's at 
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4 Kennesaw? 


5 A. 

That's correct. 

6 Q. 

And do you teach any at Kennesaw? 

7 A. 

I teach infrequently. It's been a year since I 

8 taught 

a course. 

9 Q. 

What kind of courses have you taught? 

10 A. 

I teach graduate courses in legal issues and in 


11 information technology and information technology 

12 leadership. 

13 Q. What are — what areas are you an expert in? 

14 A. I have experience in election technologies, 

15 election administration, computer science education. 


16 Q. 

What's your level of expertise with software? 

17 

MR. DENKER: Objection, form and foundation. 

18 A. 

What software? Which software? 

19 Q. 

(By Mr. Risner) Well, let's say the GEMS 


20 software. 

21 A. I'm familiar with GEMS software, with its 

22 architecture and its function. 

23 Q. And how did you get that familiarity? 

24 A. The State of Georgia has used GEMS since 2002. 

25 Through our center's use of that software, I've gained 


6 
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1 

familiarity with them. 

2 

Q. And is that through your using of the software? 

3 

A. That's correct. 

4 

of 

Q. Are you — have you done a source code review 

5 

that software? 

6 

MR. DENKER: Objection, form and foundation. 

7 

I 

A. I have not done a source code review; however, 

8 

have looked at the source code for the software. 

9 

Q. (By Mr. Risner) What does that mean? 

10 

of 

A. Well, a source code review is a formal process 

11 

reviewing the entire body of code — 

12 

(Mr. John Moffatt enters conference room.) 

13 

— the genesis of the body of code, the 

14 

done 

functionality of the body of code. So, I have not 

15 

however, 

a source code review of the software. I have, 

16 

a 

inspected the source code when I was curious about how 

17 

particular function worked. 

18 

what 

Q. (By Mr. Risner) What — I don't understand 

19 

curious. 

you mean when you inspected it because you were 

20 

What does that mean? 

21 

A. Looking at the source code to understand how an 
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22 

operation works within the system. 

23 

Q. And how did you get that source code? 

24 

A. Kennesaw State is the escrow agent for GEMS in 

25 

to 

the State of Georgia. The source code was delivered 


1 

us from what, at that time, was called the ITA, 

2 

Independent Testing Authority. 

3 

Q. Which ITA? 

4 

A. Cyber. 

5 

Q. And when was that delivered to you? 

6 

A. I don't know. 

7 

Q. And what was it you were looking for when you 

8 

looked in — 

9 

A. I don't recall the specifics. 

10 

Q. Was it a particular thing that you were looking 

11 

for? 

12 

MR. DENKER: Objection, form and foundation. 

13 

A. I don't recall whether it was specific or if it 

14 

was a general. 

15 

Q. (By Mr. Risner) And what — when was it? 

16 

A. I don't recall. 

17 

Corporation? 

Q. Have you ever consulted for Diebold 
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18 

A. I have not. 

19 

Q. So they've not paid you at any time? 

20 

A. No. 

21 

by 

Q. In this case, you've been hired, have you not, 

22 

Pima County for some consulting and testifying? 

23 

cont ract 

A. We have discussed. I have not signed a 

24 

with Pima County. 

25 

Q. So, what have you discussed with Pima County? 


1 

MR. DENKER: Objection, form and foundation. 

2 

A. Reimbursement for expenses. 

3 

Q. (By Mr. Risner) And how about your time? Are 

4 

you being paid separately for that? 

5 

total 

A. I've asked that my time be reimbursed for a 

6 

of $10, a check payable to the foundation at my 

7 

university. 

8 

Q. And who contacted you from Pima County? 

9 

A. Karen Friar. 

10 

Q. And do you know how she got your name? 

11 

A. I believe it was from Brad Nelson. 

12 

Q. And do you know how Brad Nelson knows of you? 

13 

MR. DENKER: Objection, form and foundation. 
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14 

A. Brad was at a conference at which I made a 

15 

presentation. 

16 

Q. (By Mr. Risner) What conference was that? 

17 

A. I think it was CERA, C-E-R-A. 

18 

Q. What's that mean? 

19 

A. It's the organization that provides continuing 

20 

education to county — I'm sorry — to election 

21 

officials. 

22 

Q. And what was your presentation about? 

23 

A. Ballot building. 

24 

Q. And when was that made? 

25 

sometime 

A. I'd have to consult my calendar. It was 


1 

within the past 18 months. 

2 

Q. And were you paid separately for that 

3 

presentation? 

4 

A. I was not paid nor reimbursed for travel 

5 

expenses. 

6 

Q. So why are you appearing here for just 10 bucks 

7 

for your time? 

8 

that 

A. Well, I was asked to, is one. The second is 

9 

I'm concerned about the integrity of elections. 


that 
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10 

Q. What do you mean by that? 

11 

A. I'm interested in doing what I can to make sure 

12 

that elections run smoothly, not only in the State of 

13 

Georgia, but wherever I can provide advice to a 

14 

jurisdiction. 

15 

Q. What do you mean by "smoothly"? 

16 

A. Well, that's a good question. "Smoothly" means 

17 

without contesting results, without anomalies in the 

18 

process. 

19 

of 

Q. And do you have — what is your understanding 

20 

impact 

the issues involved with this lawsuit that would 

21 

the smooth operation of elections? 

22 

A. I'm not sure I understand your question. 

23 

this 

Q. Well, I take it that there's something about 

24 

case that you feel impacts that goal of smooth 

25 

operations, and I'm wondering what that is. 

10 



1 

of 

A. Well, I don't — I don't know that the aspects 

2 

this case impact my impression of smooth operations. 

3 

The case, as I've read, it focuses on the 


request 
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4 

for a copy of the GEMS database. The release of GEMS 

5 

databases to the public gives me concern. 

6 

MR. RISNER: Okay. Incidentally, I'd like the 

7 

record to reflect that John Moffatt is present. 

o 

—h 

00 

Q. (By Mr. Risner) What is it about the release 

9 

the GEMS database that gives you concern? 

10 

A. Because of information that's contained within 

11 

the GEMS database, specifically user IDs, passwords. 

12 

Q. And what's the problem with that? 

13 

A. Organizations typically work diligently to 

14 

protect the security of user IDs and passwords. 

15 

Q. And what else would give you concern about the 

16 

release of the database? 

17 

A. The structure of the database is consistent 

18 

through all jurisdictions that use GEMS, so the 

19 

revelation of one jurisdiction's database structure 

20 

reveals information — potentially reveals information 

21 

about other jurisdictions. 

22 

Q. Any other problems you see with releasing the 

23 

database? 

24 

issues, 

A. There are potential intellectual property 

25 

familiar 

but that's jurisdiction dependent, and I'm not 


11 
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program 


1 with Arizona law to know whether that's an issue here. 


2 

Q. 

So that's — those things are your concerns 

? 

3 

A. 

Yes. 


4 

Q. 

Okay. And have you — what have you been asked 

5 

to do 

in this case? 


6 

A. 

Well, I've been asked to give an opinion on 


7 

whether the GEMS database constitutes a computer 


8 

as defined by Arizona statute. 


9 


(Karen Friar enters conference room.) 


10 

Q. 

(By Mr. Risner) And any other opinions you 

' ve 

11 

been asked to give? 


12 

A. 

I've been asked to give an opinion on the 


13 

security implications of releasing the database. 


14 

Q. 

Anything else? 


15 

A. 

Not that I can recall. 


16 

Q. 

What is your opinion, then, on whether the 

GEMS 

17 

database constitutes a computer program as defined 

by 

18 

Arizona statute? 


19 

A. 

I believe that it does. 


20 

Q. 

And which Arizona statutes are you — have 

you 

21 

consulted? 


22 

A. 

Perhaps you're more familiar with the code. 


23 

(Hands 

document to Mr. Risner.) 
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Q. You've handed me what I believe is ARS 16-444, 
the definitions applicable, generalized. Which one of 


those definitions have you looked at? 

A. Definition four. 

Q. Four. 

A. Paragraph four. 

Q. And, okay, so why do you think that a GEMS 
database constitutes a computer program as defined by 
that? 

A. I'm sorry. Could you repeat the question? 

Q. Yeah. So why do you think a GEMS database 
constitutes a computer program as defined by that 
statute? 

A. Computer program includes all programs and 
documentation adequate to process the ballots. You 
cannot process the ballots without GEMS. 

Q. Anything else? 

A. No. 

Q. And the security implications, what's your 
opinion on that? 

A. The release of the GEMS database reveals the 
structure of the database. The revelation of the 
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21 

22 

23 

24 

25 

You 

13 


1 

database 

2 

3 

4 

5 

6 

7 

8 
9 

10 

11 

12 

13 

14 

15 

16 


structure may give hackers insights into how to 
construct a workable attack against the GEMS system. 
Q. Anything else? 

A. No. 

Q. Let me go back to a couple of these things. 


expressed concern that the turning over of the 

would reveal user IDs. 

A. That's correct. 

Q. Is that correct? 

A. (No oral response.) 

Q. Yeah. How difficult is it to change user IDs? 

MR. DENKER: Objection, form and foundation. 

A. To change user IDs in GEMS? 

Q. (By Mr. Risner) Yeah. 

A. That is a normal procedure, a normal function 
that's made available in the system, so it's not 
difficult. 

Q. And in good computer security practice, should 
user IDs be changed from time to time? 

MR. DENKER: Objection, form and foundation. 

A. That is an accepted practice in security. 
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17 

However, revealing the syntax rules for the user IDs 

18 

should never be revealed. 

19 

Q. (By Mr. Risner) What's that mean? 

20 

A. For example, if an organization constructs user 

21 

and 

IDs out of, say, the first letter of the first name 

22 

the last name, that reveals the syntax that may be 

23 

useable by hackers to launch an attack against the 

24 

system. 

25 

So, changing pass — or user IDs is an accepted 

14 



1 

good practice. Revealing the syntax for them would be 

2 

considered poor security. 

3 

Q. Have you seen the codes on GEMS user IDs? 

4 

MR. DENKER: Objection, form and foundation. 

5 

A. Which installation? 

6 

Q. (By Mr. Risner) The encryption process. 

7 

A. Have I seen the encryption process? 

8 

Q. Yeah. 

9 

A. No. That's not a doable process, but I'm not 

10 

alone in not having seen it. 

11 

Q. Do you know what Pima County uses for user ID? 

12 

A. I do not. 

13 

Q. And do you know if they have more than one user 
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14 

system? 

ID, depending on the person that's operating the 

15 

A. 

I do not. 

16 

Q. 

And the same thing with passwords, do you know 

17 

what — 

- whether passwords should be changed regularly? 

18 

A. 

Passwords should be changed regularly. 

19 

Q. 

And is that difficult, also? 

20 

A. 

It is not difficult. 

21 

passwords 

Q. 

Okay. So, in terms of the user ID and 

22 

as reasons not to give the database to the Democratic 

23 

Party, 

are those weighty at all? 

24 

A. 

They are weighty. 

25 

Q. 

Huh? 

15 



1 

A. 

They are weighty. 

2 

Q. 

They are? 

3 

A. 

Because it reveals the syntax of the user IDs. 

4 


MR. DENKER: Would you reflect a form and 

5 

foundation objection to that previous question. Thank 

6 

you. 


7 

structure 

Q. 

(By Mr. Risner) You mentioned that the 

8 

of the 

database is consistent in all jurisdictions. 
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cv-02989-AT Document 441 Filed 07/01/19 Page 96 of 443 

A. That use GEMS. 

Q. Yeah. So, if the database was revealed here, 
then that would create a problem other places? 

A. That's speculative. I don't know that it would 
create problems in other places, but it would give 
potential hackers insight into the database structure 
used in other GEMS based jurisdictions. 

Q. Are you aware that the Democratic Party in the 
State of Alaska received a copy of the database? 

A. I have read that. I don't know the details of 
it. 

Q. You think that has created a problem, then, 

giving information to hackers? 

MR. DENKER: Objection, form, foundation. 

A. I think it increases the risk. 

Q. (By Mr. Risner) Yeah, and if the Pima County 
Democratic Party got the database, how much increase 


would that be in the risk? 

MR. DENKER: Objection, form, foundation. 

A. I can't speculate on the perception increase or 
whatever metric. 

Q. (By Mr. Risner) Yeah. In terms of the user 
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ID, 



6 

is a 

good practice to have one ID shared 

by several 


7 

people or to have individual user IDs? 



8 

A. 

That's a poor practice. 



9 

Q. 

Which one? 


user. 

10 

A. 

Having a single ID shared by more 

than one 

the 

11 

Q. 

Do you know that Pima County uses 

"admin" as 


12 

user 

ID only? 



13 


MR. DENKER: Objection, form, foundation. 


14 

A. 

That they currently use "admin" only? 


15 

Q. 

(By Mr. Risner) Yeah. Yeah. 



16 

A. 

I do not know that. 


that 1 s 

17 

Q. 

What do you think about that practice, if 


18 

the case? 



19 

A. 

Repeat your first question. 



20 

Q. 

Sure. 



21 

A. 

Okay. 



22 

Q. 

If Pima County uses "admin" as the 

user ID for 

23 

security 

everyone who's on the computer, is that a 

good 


24 

practice? 



25 

A. 

On the surface, it would certainly 

seem not to 


17 
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1 

be. Usually the administrator is a single individual. 

2 

records? 

Q. What do you know about Arizona's public 

3 

MR. DENKER: Objection, form and foundation. 

4 

A. I don't know. I don't know. 

5 

Q. (By Mr. Risner) Yeah. And what do you know 

6 

about the security of, or how the security's operated 

7 

in, Pima County with their election central count 

8 

computer? 

9 

MR. DENKER: Objection, form, foundation. 

10 

the 

A. I spent approximately two-and-a-half hours at 

11 

of 

center yesterday and was given a high level overview 

12 

some of the current security procedures at the center. 

13 

of 

Q. (By Mr. Risner) Okay. And were you informed 

14 

the various changes that had been made within the last 

15 

couple of years? 

16 

if 

A. I was informed of some changes. I don't know 

17 

I was given the complete list of changes. 

18 

Q. And did they mention what role the Pima County 

19 

Democratic Party had played in increased security in 

20 

Pima County? 

21 

was 

A. I understand the Pima County Democratic Party 
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22 

23 

24 

25 

elections? 

18 


1 

2 

3 

4 

5 

6 

7 

Democratic 

8 
9 

10 

accurate? 

11 

12 

13 

14 

15 

16 
17 


instrumental in raising some of the issues that led to 
policy changes. 

Q. In your state of Georgia, how involved are 
political parties in ensuring the accuracy of 


MR. DENKER: Objection, form, foundation. 

A. I would say not much. 

Q. (By Mr. Risner) And at what level are they 
involved? 

MR. DENKER: Objection, form, foundation. 

A. I'm — I can't think of a single instance in 
which we have had interaction with either the 

or Republican Party on an election issue. 

Q. (By Mr. Risner) Well, in Georgia, who conducts 
oversight to make sure that the elections are 

MR. DENKER: Objection, form, foundation. 

A. Ultimately, the secretary of state is the chief 
election officer, and the responsibility for election 
administration is in the Elections Division of the 
secretary of state's office, with the exception of 
municipal elections. 

Q. (By Mr. Risner) At the end of an election, do 
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18 

they audit counties to see — you know, for instance, 

19 

take a look at GEMS, to see that it's all operated 

20 

properly? 

21 

A. The secretary of state's office has requested 

22 

post-election audits on elections over the years. 

23 

Q. Okay. And who does those? Does your group do 

24 

it? 

25 

A. We provide technical support, but investigators 


19 


1 

within the SOS office conduct the investigation. 

2 

Q. What kind of investigations have they done? 

3 

MR. DENKER: Objection, form, foundation. 

4 

investigation 

A. One objection — or, I'm sorry, one 

5 

a 

was on allegations of machines not working properly in 

6 

precinct. 

7 

Q. (By Mr. Risner) Yeah, so what — what did they 

8 

do with that, do you know? 

9 

A. The machines were quarantined. Investigators 

10 

performed tests on the machines. In that particular 

11 

case, the complainant failed to show to the 

12 

investigation, which shortened the investigation 

13 

considerably, primarily confirming that the machines 
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14 

work i 

as designed. 

15 

Q. 

Yeah. And when was that investigation, do you 

16 

know? 


17 

A. 

It was approximately three years ago. 

18 

Q. 

Yeah. Can you think of any others? 

19 

A. 

Any others that relate to what? 

20 

Q. 

Anything. You know, just where the secretary 

21 

state 

— you said, if I understand you, that the 

22 

secretary of state can send investigators and do an 

23 

investigation. 

24 

A. 

That's correct. 

25 

Q. 

And if I understand you, your group that you're 


1 the executive director of has been the technical 

advisor 

2 of this. 

3 A. That's correct. 

4 Q. So, I'm asking if you can think of any others, 

5 other than the one you just talked about? 

6 A. Most investigations that are initiated by the 

7 secretary of state's office deal with voter fraud that 

8 deal with paper ballots. That does not involve our 

9 organization. 
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well 


do 


10 

Q. 

Yeah. Yeah. How do you determine in Georgia 

11 

whether some insiders in the county 

haven't rigged the 

12 

computer to get the results the way 

they want? 

13 


MR. DENKER: Object to form and foundation. 

14 

A. 

That's a very presumptive question. That's 

15 

beyond 

the scope of my unit. 


16 

Q. 

(By Mr. Risner) Excuse me? 


17 

A. 

That is well beyond the scope 

of my unit. We 

18 

not do 

criminal investigations. 


19 

Q. 

How many counties do you have 

in Georgia? 

20 

A. 

159. 


21 

Q. 

And so do you all just assume 

that all 159 are 

22 

not cheating? 


23 


MR. DENKER: Objection, form, 

foundation. 

24 

A. 

I assume nothing. 


25 

Q. 

(By Mr. Risner) Huh? 



21 


1 

2 

3 

4 

5 


A. I assume nothing. 

Q. Well, who checks to see if there's insiders 
cheating? 

MR. DENKER: Objection, form, foundation. 

A. The responsibility for each county election 
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falls 


6 

upon either the superintendent of elections, appointed 

7 

by a board of elections in that county, or on the 

8 

probate court judge for that county. That is their 

9 

responsibility, to investigate — at least to initiate 

10 

counties. 

any investigations of impropriety within their 

11 

Q. (By Mr. Risner) Okay. So, if somebody caught 

12 

something, they could go to court and ask one of these 

13 

superintendents to investigate. Is that what you're 

14 

saying? 

15 

MR. DENKER: Object to form and foundation. 

16 

may 

A. I don't know the procedure that an individual 

17 

take. 

18 

Q. (By Mr. Risner) Well, what I'm just wondering 

19 

is, as a regular process, is there anyone that audits 

20 

and checks to see that the county — 159 counties are 

21 

doing it right? 

22 

county. 

A. The superintendent of elections for that 

23 

Q. And do you know what they look at? 

24 

A. I think that would depend upon the allegation. 

25 

allegation, 

Q. Yeah. So there has to be a specific 


22 
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1 

in other words? 

2 

A. I would think so. 

3 

or 

Q. Okay. And your group doesn't give suggestions 

4 

technical advice or anything like that. Would that be 

5 

right? 

6 

MR. DENKER: Object to form, foundation. 

7 

A. Technical advice to whom? 

8 

elections 

Q. (By Mr. Risner) The superintendent of 

9 

in the various counties. 

10 

A. If a request for technical advice comes from a 

11 

advice, 

superintendent, we would typically provide that 

12 

unless there was some reason given to us by the 

13 

secretary of state not to. 

14 

Q. So, have you ever gotten a request from one of 

15 

advice? 

those superintendents of elections for technical 

16 

A. Oh, all the time. 

17 

Q. Yeah, in terms of checking to see if insiders 

18 

have been cheating? 

19 

A. No. 

20 

observe 

Q. Who, under Georgia law, has the right to 

21 

the counting of the vote? 

22 

MR. DENKER: Objection, form and foundation. 
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23 

give 

A. I would have to consult the election code to 

24 

you the specifics, but generally it's the public. The 

25 

public have the right. 

23 



1 

Q. (By Mr. Risner) Do you have — do political 

2 

parties have any special observation rights? 

3 

A. (No oral response.) 

4 

Q. Huh? 

5 

A. Not that I'm aware of. 

6 

Q. Are you aware of what Arizona law provides for 

7 

rights of political parties to monitor and observe 

8 

elections? 

9 

MR. DENKER: Objection, form, foundation. 

10 

A. I'm becoming aware of it, but I'm not 

11 

knowledgeable of Arizona code in that regard. 

12 

becoming 

Q. (By Mr. Risner) So who's — how are you 

13 

aware of that? 

14 

A. Reading the statutes. 

15 

Q. So, have you learned that we have kind of a 

16 

different system than Georgia? 

17 

MR. DENKER: Objection, form, foundation. 

18 

A. I'm learning that, yes. 
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19 Q. (By Mr. Risner) In Georgia, your secretary of 

20 state, or legislature, somebody decided to buy all 

21 direct recording machines, didn't they, for elections 
in 

22 Georgia? 

23 MR. DENKER: Objection, form, foundation. 

24 A. The State of Georgia uses DREs and optical scan 

25 technology to support elections. 


they 


1 

Q. 

(By Mr. Risner) Yeah, and when — when did 

2 

make 

that decision? 

3 

A. 

March of 2002. 

4 

Q. 

And Georgia uses all Diebold equipment? 

5 


MR. DENKER: Objection, form, foundation. 

6 

A. 

For county based elections, yes. 

7 

Q. 

(By Mr. Risner) What does that mean? 

8 

A. 

Municipalities have the discretion to hold 

9 

elections on technologies other than DRE and optical 

10 

scan. 


11 

Q. 

Okay. So, cities and towns can use something 

12 

different? 

13 

A. 

That's correct. 

14 

Q. 

All right. But the — if it's a county 
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election 

15 

16 

17 
up 

18 

19 

20 
21 

early 

22 

23 

24 

25 

25 

1 

2 

3 

4 

5 

6 

7 

state 

8 
9 


or state election, they use Diebold equipment? 

A. That's correct. 

Q. And how is that sort of just generally divided 

between the DREs and the optical scans? 

MR. DENKER: Objection, form, foundation. 

A. Optical scan is used for mail-in, absentee 
ballots. DRE's used for polling place voting and 

voting. 

Q. (By Mr. Riser) How is early voting different 
than absentee? 

A. Early voting is in person, in a central polling 


place. 

Q. And when — what role did you play, if any, in 
the decision to use all DREs at the polling places? 

A. No role. 

Q. Were you asked for advice? 

A. No. 

Q. And Georgia was the — were they the first 

to do this, to use all DREs? 

A. My understanding, yes. 
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TS? 


26 


a 


10 

Q. 

And were these the TS machines? 

11 

A. 

I'm not sure if I follow your question. 

12 

Q. 

Well, what machines were used? 

13 


MR. DENKER: Objection, form, foundation. 

14 

A. 

The DRE units — 

15 

Q. 

(By Mr. Risner) Yeah. 

16 

A. 

— are model R6. 

17 

Q. 

Are you familiar with the term TS or TSX? 

18 

A. 

Well, yes, I am. 

19 

Q. 

Okay. Yeah. So, is the R6 also known as the 

20 

A. 

By whom? 

21 

Q. 

Heck, I don't know. I see it in all these 

22 

reports, you know. 

23 

A. 

TS in an acronym that stands for touch screen 

24 

Q. 

Yeah. 

25 

A. 

Many companies produce TS units, touch screen 


1 

units. 


2 

Q. Okay. 


3 

A. Diebold 

refers to this model that we use as the 

4 

R6 unit. They 

have another unit, the TSX, and that is 


5 unique model number. 
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6 

Q. 

Okay. So, TSX is a unique model number of 

7 

Diebold, right? 

8 

A. 

That's correct. 

9 

Q. 

And a lot of folks call this other unit TS, but 

10 

among 

Diebold they actually call it an R6? 

11 

A. 

That's correct. 

12 

Q. 

Is that what — 

13 

A. 

Well — 

14 


MR. DENKER: Objection, form, foundation. 

15 

A. 

Well, the unit that we use in Georgia is the 

16 

Diebold R6 unit. 

17 

Q. 

(By Mr. Risner) And is that the same unit that 

18 

Volusia County in Florida uses, do you know? 

19 

A. 

I don't know. 

20 

was 

Q. 

I just — I may have the wrong county, but I 

21 

Florida, 

thinking, wasn't there some county, in 2006, in 

22 

where 

there were, you know, 16,000, a whole bunch of 

23 

votes 

that weren't recorded at all? 

24 


MR. DENKER: Objection, form, foundation. 

25 

Q. 

(By Mr. Risner) Do you know anything about 


that? 


27 
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1 

A. 

I'm not sure I follow your question. 


2 

broadcasts, 

Q. 

I'm just trying to remember from news 


3 

but I 

think there was an election for Congress, 

the 

4 

United States House of Representatives, in 2006, 

and 

5 

16,000, 

some 

county in Florida, there were, I'm thinking 


6 

I may 

be wrong, a whole bunch of votes that simply 

7 

weren 

't recorded on those machines. Does that ring a 

8 

bell 

with you? 


9 

in 

A. 

If you're referring to the ES&S machines 

used 

10 

at 

Sarasota, Florida, there's been allegations, although 

11 

this 

point unsubstantiated allegations, that the 

ES&S 

12 

significant 

machines used in Sarasota, Florida, recorded 


13 

under 

-votes for a congressional seat. Is that what 

14 

you're referring to? 


15 

Q. 

Yeah, that sounds right, yeah. 


16 


So, were those touch screen machines? 


17 

A. 

The ES&S machines? 


18 

Q. 

Yeah. 


19 

A. 

Yes. 


20 

Q. 

And do you know what the problem was with 

those 

21 

machines or what happened down there? 


22 


MR. DENKER: Objection, form, foundation. 


23 

A. 

No. 
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24 

Q. (By Mr. Risner) So, do you know anything about 

25 

the — about Pima County's election staff's level of 


28 


1 

competence? 

2 

MR. DENKER: Objection, form, foundation. 

3 

A. No. 

4 

Q. (By Mr. Risner) And I would say the same thing 

5 

about Brad Nelson, do you know if he has any knowledge 

6 

about how these computer systems work? 

7 

MR. DENKER: Objection, form and foundation. 

8 

A. I am not knowledgeable of Mr. Nelson's 

9 

competence. 

10 

Q. (By Mr. Risner) And has Pima County discussed 

11 

in 

with you the security changes that they plan to make 

12 

the future? 

13 

MR. DENKER: Objection, form, foundation. 

14 

A. I have read, I believe, an outline of those 

15 

changes, but I have not discussed those changes with 

16 

anybody in Pima County. 

17 

of 

Q. (By Mr. Risner) So what's your understanding 

18 

the changes that they plan on making? 

19 

A. Are you talking about any change specifically, 
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or 


20 

the global set of changes? 

21 

out 

Q. Just give me the global set. I want to find 

22 

what you know about it. 

23 

A. I think the goals are laudable. I think the 

24 

implementation may be problematic. 

25 

changes 

Q. Yeah. What's your understanding of what 

29 



1 

that they're planning on making? 

2 

A. I would have to look at the document. 

3 

Q. Do you know what the summary report is in the 

4 

GEMS system? 

5 

A. Yes. 

6 

Q. And what's your understanding of when those 

7 

reports should be printed? 

8 

MR. DENKER: Objection, form, foundation. 

9 

A. That's a jurisdiction issue. 

10 

Q. (By Mr. Risner) Yeah. What does that mean? 

11 

any 

A. It means, the State of Arizona, Pima County, 

12 

decides 

municipality, whatever is using that technology, 

13 

when and by whom those reports are issued. 


decides 
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14 

Q. 

Do you know what the GEMS manual 

says about it? 

15 

A. 

No. 


16 

Q. 

What's the situation in Georgia? 


17 

A. 

I would have to consult a county 

superintendent 

18 

to know what the practice is in Georgia 

for the use of 

19 

the summary report. 


20 

Q. 

You would consult who? 


21 

A. 

The county superintendent, a superintendent of 

22 

elections. 


23 

Q. 

So, for you to know what it is in 

i Georgia, you 

24 

need 

to call one of these 159 guys and ask them? 

25 

A. 

I would want to make sure that I 

am well-versed 


1 

on how 

it is used in that particular county. 

2 

Q. 

There's not a state law? 

3 

A. 

No. 

4 

Q. 

Any state rules? 

5 

A. 

No. 

6 

Q. 

No secretary of state regulations on it? 

7 

A. 

Not that I'm aware of. 

8 

Q. 

Are you aware that the Democratic Party in this 

9 

case has not requested a copy of GEMS? 

10 


MR. DENKER: Objection, form, foundation. 
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11 

A. 

I am not aware of — I'm trying to answer that 

of 

12 

question. You asked a negative. I have no knowledge 


13 

the Democratic Party requesting a copy of GEMS. 

agree 

14 

Q. 

(By Mr. Risner) Right. So then you would 


15 

that, 

to your understanding, the Democratic Party has 


16 

not requested a copy of GEMS? 


17 

A. 

That's correct. 

18 

requested 

Q. 

Yeah, and that the Democratic Party has 


19 

a copy of the database? 


20 


MR. DENKER: Objection, form, foundation. 


21 

A. 

That's correct. 


22 

Q. 

(By Mr. Risner) And earlier, if I understood 


23 

your 

answer, you said that, in your opinion, 16-444, 


24 

that 

GEMS was a computer program? 


25 

A. 

No — 

31 

1 


MR. DENKER: Objection to form, foundation. 


2 

A. 

— the GEMS database. 


3 

Q. 

(By Mr. Risner) What's the difference between 


a 

4 database and a computer program? 

5 MR. DENKER: Objection, form, foundation. 


Case l:17-cv-02989-AT Document 441 Filed 07/01/19 Page 115 of 443 


6 

Q. (By Mr. Risner) In general. 

7 

A. Are you presuming there is a difference? 

8 

dumb 

Q. I'm just — you're the expert. I may ask a 

9 

but 

question. Yeah, I'm presuming there's a difference, 

10 

tell me if there's not. 

11 

I 

A. In the Arizona statute, as I understand it, if 

12 

may 

can read it just to refresh my memory, it states — 

13 

I do so? 

14 

Q. Yeah, but my question at the moment relates to 

15 

just, in general, computer technology usage. 

16 

A. A computer program is a set of stored — 

17 

MR. DENKER: Objection, form, foundation. Go 

18 

ahead. Sorry. 

19 

A. A computer program is a set of stored 

20 

accomplish 

instructions that causes a computer system to 

21 

a task. 

22 

Q. (By Mr. Risner) And what's a database? 

23 

A. A database is a complex data structure that 

24 

contains both data and objects, of which those objects 

25 

can be executable code, as well as metadata. 


32 
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1 

2 

3 

4 

5 

6 


Q. Does the GEMS database contain executable code? 

A. It does in the form of SQL queries. 

Q. Do you know if the SQL in the database is 
interpretable code, or is it just in the database as a 
byproduct of Diebold's choice of Microsoft Access as a 
database? 


7 


MR. DENKER: Objection, form, foundation. 


8 

A. 

I don't know. 


9 

Q. 

(By Mr. Risner) What's the function of those 

10 

queries in the database? 


11 

A. 

Used to support report generation. 


12 

Q. 

Does GEMS generate the SQL codes? 


13 


MR. DENKER: Objection, form, foundation. 


14 

A. 

Yes. 


15 

Q. 

(By Mr. Risner) Is that self-modifying code? 

16 

A. 

The SQL? 


17 


MR. DENKER: Objection, form, foundation. 


18 

Q. 

(By Mr. Risner) Yeah. 


19 

A. 

No. 


20 

Q. 

Between — the combination between GEMS and 

the 

21 

SQL in 

the database, is that self-modifying code? 


22 

A. 

No. 


23 


MR. DENKER: Let me reflect an objection to 

the 

24 

last question, as well. Thank you. 
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25 MR. RISNER: What was the objection? 


1 


MR. DENKER: Form and foundation. 

2 

Q. 

(By Mr. Risner) You know what self-modifying 

3 

code 

is, don't you? 

4 

A. 

I know what a technical definition of 

5 

self-modifying is. 

6 

Q. 

Did you understand my question? 

7 

A. 

I did. 

8 

Q. 

If — the SQL in the database, is that 

9 

interpreted code? 

10 

A. 

It is. 

11 

Q. 

Do you know whether the federal certification 

12 

process treated that code as data or as code? 

13 

A. 

I do not. 

14 


MR. DENKER: Objection, form, foundation. 

15 

Q. 

(By Mr. Risner) Do you understand the federal 

16 

certification rules in the federal manual for the ITAs 

17 

to do 

certification? 

18 


MR. DENKER: Objection, form, foundation. 

19 

A. 

ITAs no longer do certification. 

20 

Q. 

(By Mr. Risner) Okay. How about if we change 

21 

the term to qualification. 
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22 


MR. DENKER: Same objection. 

23 

A. 

I'm not sure I can answer your question. 

24 

Q. 

(By Mr. Risner) Are you familiar with the 2002 

25 

voting 

system standards? 


1 MR. DENKER: Objection, form, foundation. 

2 A. I'm not familiar with a document that you're 

3 describing. 


4 

Q. 

(By Mr. Risner) Are you familiar with some 

5 

standards called VBSG? 

6 

A. 

Yes. 

7 

Q. 

And the 1990 and 2002 editions? 

8 

A. 

1990 was not called the VBSG. 

9 

Q. 

What was that called? 

10 

A. 

That was the VSG. 

11 


MR. RISNER: I think I want to take a break. 

12 


(Break taken, 10:01 to 10:11 a.m..) 

13 

Q. 

(By Mr. Risner) Yeah, Mr. King — 

14 

A. 

Yes. 

15 

Q. 

— is it true that the program code has to be 

16 

scrutinized by the ITAs — 

17 


MR. DENKER: Objection, form, foundation. 

18 

Q. 

(By Mr. Risner) — pursuant to the federal 
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19 rules? 

20 A. What do you mean, "scrutinized"? 

21 Q. You know, these Independent Testing Authorities 

22 have to look at certain code, don't they — 

23 A. They do. 

24 Q. — source code? Do they do a source code 

review? 

25 A. Yeah. 

35 


1 Q. Yeah, and after they do the source code review, 

2 they come up with a hash number; is that correct? 

3 MR. DENKER: Objection to form, foundation. 

4 A. I'm not aware of that. 

5 Q. (By Mr. Risner) Well, you do know what a hash 

6 code is, don't you? 

7 A. I do. 

8 Q. Yeah. And are you aware that various computer 

9 election programs have, like, a library somewhere 

where 

10 there's a number of what the hash codes are that are 

11 actually publicly available? 

12 A. The NSRL library? 

13 Q. Yeah. 

14 A. Yes. 
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15 

bad 

Q. So, I'm sorry, what was — I may have asked a 

16 

at 

question before, but don't the ITAs, after they look 

17 

for 

the source code, develop a hash number or hash code 

18 

it? 

19 

A. I'm not aware of that, if they do. 

20 

library? 

Q. Yeah, how does that number get into that 

21 

MR. DENKER: Objection, form, foundation. 

22 

A. I'm not sure what the NIS procedures are for 

23 

submission of the hash code. 

24 

hash 

Q. (By Mr. Risner) So you don't know how those 

25 

codes get there? 

36 



1 

A. I do — I do not know. 

2 

Q. And what's your understanding of the purpose of 

3 

what those hash codes are? 

4 

A. Hash codes are to be used to validate the 

5 

validity of the software that's referenced in the 

6 

library. 

7 

Q. And then are there any hash codes for the 

8 

database? 

9 

MR. DENKER: Objection, form, foundation. 
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10 

11 

12 

13 

14 

15 

16 

17 

18 

19 

20 

interpreted 

21 

22 

23 

24 

25 


37 


the 


1 

2 

3 

4 

5 


Q. (By Mr. Risner) I mean, there can't be hash 
codes for database elements, can there? 

MR. DENKER: Objection, form, foundation. 

Q. (By Mr. Risner) Or can there? 

A. Well, of course there can. 

Q. Huh? 

A. Of course. 

Q. Did the ITAs develop any — something for the 
database? 

A. Not that I'm aware of. 

Q. The SQL elements, you said those are 

code, right? 

A. SQL is an interpreted language. 

Q. Can it be modified at the county level? 

MR. DENKER: Object to form and foundation. 

A. I'm not aware of how that could be done. 


Q. (By Mr. Risner) Is there anyone anywhere in 

system that's checking to see if it's been changed at 
the county level? 

MR. DENKER: Objection, form, foundation. 

A. I'm not aware. 


Case l:17-cv-02989-AT Document 441 Filed 07/01/19 Page 122 of 443 


the 


that 


38 


6 

Q. 

(By Mr. Risner) And I think you said what the 

7 

SQL is 

involved with is report generation. 

8 

A. 

Yes. 

9 

Q. 

All right. Anything else? 

10 

A. 

Not that I'm aware of. 

11 

Q. 

And that's not a core vote counting function, 

12 

correct? 

13 

A. 

Report generation would not be a core vote 

14 

counting function. 

15 

Q. 

So, the SQL just has some role in organizing 

16 

data; 

is that correct? 

17 


MR. DENKER: Objection, form, foundation. 

18 

A. 

I don't know what you mean by "organizing the 

19 

data". 


20 

Q. 

(By Mr. Risner) The report generation just 

21 

reorganizes data and presents it for viewing, isn't 

22 

correct? 

23 

A. 

That's incomplete. 

24 

Q. 

Okay. Complete it for me. Explain why it's 

25 

incomplete. 

1 

A. 

It presents data for report generation. 
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2 

Q. Yeah. Okay. Viewing or printing? 

3 

written 

A. It may be viewed, may be printed, may be 

4 

to a file. 

5 

Q. And couldn't that be done by the same SQL that 

6 

resides inside GEMS? 

7 

MR. DENKER: Objection, form, foundation. 

8 

A. That's speculation. I don't know. 

9 

Q. (By Mr. Risner) Okay. So, I guess, do you 

10 

residual 

actually know whether it's functional or just a 

11 

or byproduct of GEMS? 

12 

MR. DENKER: Objection, form, foundation. 

13 

A. It is functional. 

14 

Q. (By Mr. Risner) How do you know that? 

15 

A. In reviewing the code, reviewing the SQL 

16 

those 

statements, the operations that are implied within 

17 

reports. 

statements are necessary for the production of 

18 

you 

Q. Well, but, okay, let me see if I'm following 

19 

here. You said the SQL that's in the database is 

20 

necessary for the production of reports. 

21 

A. That's correct. 

22 

itself? 

Q. Yeah, but isn't there similar SQL in GEMS 

23 

Do you know? 
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24 

A. I do not know. 

25 

Q. Could it be there? 

39 



1 

MR. DENKER: Objection, form, foundation. 

2 

have 

A. Are you asking me if it's possible? I would 

3 

to review the source code to make that determination. 

4 

if 

Q. (By Mr. Risner) Okay. So I guess what I'm — 

5 

you don't know whether it's in GEMS, how do you know 

6 

that it's using the SQL in the database as opposed to 

7 

SQL in GEMS? 

8 

A. I'm not sure I follow your question. Can you 

9 

reask it? 

10 

Q. Yeah. If I understand you, you don't know 

11 

whether GEMS itself has SQL in it. 

12 

A. That's correct. 

13 

Q. And you don't know whether, in generating 

14 

reports, GEMS actually uses the SQL that's inside GEMS 

15 

to do that, correct? 

16 

A. That's not correct. 

17 

Q. No, okay. Why not? 

18 

to 

A. GEMS is the overall envelope that is required 
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19 

20 
21 
22 

23 

24 

25 
has 

40 


1 

2 

3 

4 

5 

SQL 

6 

7 

something, 

8 

9 

10 

11 

12 

13 


run an election, that in order for that election to be 
properly processed, it must use the SQL code that's in 
the database. 

Q. Why must it? 

A. Because the reports that are produced are an 
essential part of the election report. 

Q. Yeah, but you don't know whether GEMS itself 


SQL that would generate those reports, correct? 

A. I do not know if the GEMS — and I'm assuming 
that you mean the GEMS executable? 

Q. Yeah. 

A. I do not know that the GEMS executable has an 

interpreter. 

Q. In Georgia, just to clear up a little 

it's not terribly important for this case, but didn't 

wasn't Diebold hired to pretty much run the election 
there in Georgia in 2004? 

MR. DENKER: Objection, form, foundation. 

A. Not that I'm aware of. 

Q. (By Mr. Risner) When was that election where 


Max 
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14 

15 

16 

17 

18 

19 

20 
21 
22 

23 

24 

25 
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1 

2 

involved 

3 

4 

5 

6 

7 

8 
9 


Cleland lost? What year was that? 

A. I believe that was the fall of 2002 election. 
Q. Okay. And wasn't Diebold paid, you know, 54 
million bucks, or some huge number, to help run that 
election? 

MR. DENKER: Objection, form, foundation. 

A. Diebold had a contract with the State for 
delivery of 19,000 DRE units, 400 optical scan units, 
6,500 encoders. 

Q. (By Mr. Risner) And then they — 

A. But I'm not sure I know what you mean by "run" 

election. 


Q. Well, didn't they send a lot of their technical 
people in to help set up those machines and be 

directly in the election? 

MR. DENKER: Objection, form, foundation. 

A. They provided technicians to each county for 
election day support. 

Q. (By Mr. Risner) Yeah. You know, a few months 
ago, I was reading an article in, what is it, Rolling 
Stone, that Robert Kennedy wrote. You're smiling. 
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10 

You've read that article, haven't you? 

11 

A. No, I'm smiling that you read Rolling Stone. 

12 

Q. Well, I have a very broad range of intellectual 

13 

interests. Are you familiar with the article? 

14 

A. I am not. 

15 

Q. There was a — I forget the guy's name now, but 

16 

there was a Diebold technician in Georgia that talked 

17 

a 

about, you know, the Diebold president flying in with 

18 

little patch that he asked them to insert on the 

19 

machines and not tell any of the election officials 

20 

about it. Are you aware of those allegations? 

21 

A. I have not heard that one. 

22 

Q. Really? 

23 

A. Um-hum. 

24 

Q. Huh. And he said that he put them on, like, 

25 

1,500 machines, and they were installed on like 5,000 

42 



1 

machines in heavy Democratic areas. You've not heard 

2 

anything about that? 

3 

MR. DENKER: Objection, form, foundation. 

4 

story. 

A. You're telling me new data on — on an old 

5 

Q. (By Mr. Risner) Yeah. You've not heard about 


story. 
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6 

thousands 

Diebold coming in with a patch, putting it on 

7 

any 

of machines, and telling their employees not to let 

8 

election officials know anything about it? 

9 

MR. DENKER: Objection, form, foundation. 

10 

Q. (By Mr. Risner) That's a new story to you? 

11 

MR. DENKER: Form, foundation. 

12 

A. The version that you're telling me is a new 

13 

story. 

14 

Q. (By Mr. Risner) Yeah, which version have you 

15 

heard? 

16 

A. The allegations that a patch was applied to the 

17 

system, I'm familiar with that. 

18 

Q. Yeah. Well, what's your understanding of what 

19 

that patch was about? 

20 

MR. DENKER: Objection, form, foundation. 

21 

documentation. 

A. The — I would have to review the 

22 

As I recall, it dealt with an open port on the 

23 

configuration of Windows CE. 

24 

Q. (By Mr. Risner) So, what was the point of the 

25 

patch? 


43 
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1 

A. 

During the — 

2 


MR. DENKER: Objection, form, foundation. 

3 

A. 

During the acceptance testing of the units, the 

4 

units 

would sometimes freeze up during the testing. 

5 

Q. 

(By Mr. Risner) So, this was a patch that you 

6 

all were aware about and looked at, correct? 

7 


MR. DENKER: Objection, form, foundation. 

8 

A. 

That's correct. 

9 

Q. 

(By Mr. Risner) And that related to possible 

10 

problems with screen freezes? 

11 

A. 

Fixing the screen freeze, yes. 

12 

Q. 

Yeah. This employee of Diebold said that the 

13 

patch 

he was told related to a clock problem. So that 

14 

would 

be a patch that you weren't aware of, correct? 

15 

dealing 

A. 

I'm not aware of a discussion of a patch 

16 

with a 

clock. 

17 

Q. 

Yeah. So the — kind of interesting. You're 

18 

familiar with Rolling Stone magazine? 

19 

A. 

Um-hum, I read it. 

20 

Q. 

Yeah. Robert Kennedy, Junior, you know who he 

21 

is? 


22 

A. 

Um-hum. Um-hum. 

23 

Q. 

So, he writes an article in Rolling Stone and 

24 

election. 

quotes 

a Diebold technician who worked in that 
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25 

who personally involved — installed 1,500 patches and 

44 



1 

like 

said that his buddies, together, the group, put in 

2 

5,000 of these patches and were instructed not to tell 

3 

the Georgia election officials about it. This thing 

4 

about 

appears in a national magazine, and you don't know 

5 

it, that article. Is that what you're telling me? 

6 

MR. DENKER: Objection, form and foundation. 

7 

A. That is correct. 

8 

Q. (By Mr. Risner) I'll see if I can get you a 

9 

copy. It seems like it would be something right down 

10 

your alley. 

11 

Let me ask you about some studies of 

12 

read, 

vulnerabilities of these various systems. You've 

13 

of 

I take it, the Princeton University Security Analysis 

14 

the Diebold Accuvote TS System of September 13, 2006? 

15 

A. Yes, I have. 

16 

Q. How about the Johns Hopkins University Analysis 

17 

of Voting Systems in February 2004? 

18 

A. I am. 

19 

Q. And the California Secretary of State staff 
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20 

report. Investigations of Diebold Election Systems, in 

21 

April 2004? 

22 

A. I have not read that — 

23 

Q. Huh? 

24 

A. I have not read that report. 

25 

Q. How about the Ohio Secretary of State DLE 

45 



1 

Technical Security Assessment report of November 2003? 

2 

report. 

A. I'm aware of it, but I have not read the 

3 

T rusted 

Q. Are you — Maryland Legislative Services 

4 

Agent report of January 2004, and Robert Technology 

5 

Report? 

6 

A. I've read that. 

7 

Q. The SAIC Risk Assessment report? 

8 

A. I have not read that one. 

9 

of 

Q. The University of California Security Analysis 

10 

Diebold AccuBasic Interpreter report of 2006? 

11 

A. I don't recall reading it. 

12 

Q. Have you read the recent reports that the 

13 

Source 

California Secretary of State published, such as 

14 

Code Review of the Diebold Voting System? 


Source 
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15 

A. 

I have. 


16 

Q. 

The Ohio evaluation report from 

the 2006 

17 

election, have you read that? 


18 

A. 

I can't recall. 


19 

Q. 

Okay. How about Candice Hoke, ( 

3EMS Database 

20 

Design 

Issues Related to Voting System 

Certification 

21 

Standards, have you read that? 


22 

A. 

I can't recall. 


23 

Q. 

Well, you know Candice Hoke, of 

course, don't 

24 

you? 



25 

A. 

I don't know. 



46 


at 

I 


1 

2 

3 

4 

5 

6 

7 

8 
9 

10 


Q. You don't? 

A. I do not. 

MR. DENKER: Objection. 

Q. (By Mr. Risner) Oh, okay. I thought she was 

one of these hearings in Ohio when you were there, so 

thought you might know her from that. 

A. (No oral response.) 

Q. So what's — do you have an opinion on the sort 
of security design of the Diebold software of GEMS? 

A. Uhm — yeah, I do have an opinion. 
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11 

12 

competitive 

13 

14 

15 

16 

17 

18 
say 

19 

20 

21 

22 

to 

23 

24 

25 

47 

1 

2 

3 

that 

4 

5 
a 


Q. Yeah, what is it? 

A. Needs improvement, but is on par with 
products. 

Q. So, in other words, would you say that they all 
have pretty lousy security design? 

MR. DENKER: Objection, form, foundation. 

A. No, I didn't say that. 

Q. (By Mr. Risner) No. I'm asking if you would 
that. 

A. No. I would say they — they could all bear 
improvement. 

Q. Would you say that GEMS architecture conforms 

fundamental database design principles and software 
industry standards for ensuring accurate data? 

A. I have — I would not say that, but I would not 


deny it either. 

Q. Well, let's — 

MR. DENKER: Let me have the record reflect 

Mr. Risner is reading from a document. 

MR. RISNER: The record can reflect that I used 
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with 


to 


6 

7 


you 

problems 

20 

21 

22 

23 

24 

25 


document to formulate my question, and, in fact, the 
document is called GEMS Tabulation Database Design 


8 

Issues in Relation to Voting Systems 

Certification 

9 

Standards. 


10 

Q. 

(By Mr. Risner) GEMS database 

can be edited 

11 

MS Access; isn't that correct? 


12 

A. 

That's correct. 


13 

Q. 

And would you agree that GEMS 

dependence on 

14 

Microsoft's JET technology introduces 

additional risl 

15 

data 

accuracy and security? 


16 


MR. DENKER: Objection, form, 

foundation. 

17 

A. 

In and of itself, no. 


18 

Q. 

(By Mr. Risner) Well, would you agree that, 

19 

know, 

in a computer environment, most 

security 


are caused by IT personnel? 

MR. DENKER: Bill, I'm sorry, would you repeat 
the question? I didn't hear it. 

MR. RISNER: Well, maybe we can just read it 

back. 

(Pending question read by court reporter.) 


48 
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1 

MR. DENKER: Objection to form, foundation. 

2 

A. I'd have to — I would not offer an opinion on 

3 

that. If you're asking do IT personnel pose a risk — 

4 

Q. (By Mr. Risner) Yeah. 

5 

A. — then I would say yes. 

6 

Q. And why — I'm trying to figure out what it was 

7 

you didn't like about my first question. 

8 

A. It's a very broad question. For example, if 

9 

you're talking about pay panel, the hackers represent 

10 

personnel 

high — more risk than the small number of IT 

11 

that support that system. 

12 

Q. Okay. Well, let's just then look at voting 

13 

computer systems. Wouldn't the greatest risk be from 

14 

insiders? 

15 

MR. DENKER: Objection, form, foundation. 

16 

A. Risk to what? 

17 

Q. (By Mr. Risner) Risk for rigging elections, 

18 

changing votes. 

19 

by 

A. I — I would agree that there is a risk posed 

20 

would 

insiders. There's a risk posed by hackers. But I 

21 

not propose to stratify or quantify what that risk is. 

22 

Q. Well, why not? 

23 

A. Because there's many risks to the integrity of 


an 
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24 election. 

25 One of the concerns that many of us have is 

that 


49 


1 

of 

2 

elections. 

3 

4 

5 

6 


security is a red herring that is causing the neglect 

some of the larger issues to the integrity of 

Q. Like what? What's the larger issue? 

A. Ensuring that voters are assigned to the proper 
precincts. 

Q. How would — how could an outsider hack into 


Pima 

7 County's computer system? 

8 A. I've not done an analysis on Pima County's 

9 system — 

10 Q. Okay. 

11 A. — to answer that question. 

12 Q. In Georgia, are your Diebold systems cut off 

from 

13 the Internet access? 

14 A. They are connected to no external network, 

which 

15 would include the Internet. 

16 Q. So, you toured the Pima County facilities — 

17 A. Yes. 
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18 

Q. — but you didn't learn enough to have any view 

19 

on how someone could hack into the system? 

20 

A. That's correct. 

21 

not 

Q. Okay. So, let's assume that that computer is 

22 

network, 

connected to any other computers, it's not in a 

23 

and it's not on the Internet, and that there are no 

24 

Wi-Fis and no entry by modem. 

25 

A. Um-hum. 


50 



1 

Q. How could someone on the outside hack into that 

2 

computer? 

3 

A. I don't know. 

4 

a 

Q. Now let's assume that you've got one or two or 

5 

working 

couple of people that are on the inside that are 

6 

on that computer and have access to it, then they can 

7 

make changes, can they not? 

8 

Pima 

A. I've not reviewed the security procedures of 

9 

County to know whether those changes could be made or, 

10 

if made, whether or not they would be detectable. 

11 

Q. Well, that's fine. Let's assume that you've 


not 
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12 

looked at Pima County's particular security, but let's 

13 

just invent County X, a mythical county — 

14 

A. Um-hum. 

15 

Q. — that has a set-up where the computer's not 

16 

modems, 

connected to another computer, not networked, no 

17 

no Wi-Fi. Then what would that County X do to see if 

18 

their inside computer operator had made changes? 

19 

MR. DENKER: Object to form, foundation. 

20 

A. I would have to know the existing controls in 

21 

that hypothetical environment that you described in 

22 

order to know whether that's possible or, if possible, 

23 

how probable. 

24 

saying, 

It's very difficult — I mean, if you're 

25 

hypothetically, can anything happen, I think, by 

51 



1 

definition, hypothetically, anything can happen. 

2 

at 

Q. (By Mr. Risner) Well, what I'm trying to get 

3 

these 

is what kind of controls would be needed to catch 

4 

insiders. 

5 

MR. DENKER: Object to form and foundation. 

6 

A. Well, I think the standard protocol include 
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7 

supervision, logs, independent review. 

8 

Q. (By Mr. Risner) Who conducts the independent 

9 

review? 

10 

MR. DENKER: Objection, form, foundation. 

11 

A. Are you asking who can? 

12 

Q. (By Mr. Risner) Yeah. 

13 

A. Whoever the jurisdiction names as most 

14 

appropriate. 

15 

Q. And logs, what do you mean by "logs"? 

16 

to 

A. Logs, access logs to the facility, access logs 

17 

the server, access logs to the software. 

18 

Q. And by "supervision, 11 what do you mean? 

19 

A. Good business practices, that employees are 

20 

properly trained and properly supervised. 

21 

Q. What do you — if, you know, everyone is using 

22 

the same user name, then that would defeat the log 

23 

functions, wouldn't it? 

24 

A. It would certainly compromise log functions. 

25 

Q. What if the inside person running the computer 

52 



1 

took home with him a backup copy of the database at 

2 

night, would you see any security problems with that? 


Case l:17-cv-02989-AT Document 441 Filed 07/01/19 Page 140 of 443 


3 

MR. DENKER: Object to form and foundation. 

4 

A. I would have to first look at what the 

5 

jurisdiction rules are on the custody of that data. 

6 

Q. (By Mr. Risner) I didn't ask you whether it 

7 

security 

broke any rules. I'm asking you if you see any 

8 

problems with a guy taking home with him a copy of the 

9 

database. 

10 

A. On the surface, it would raise questions, 

11 

clearly. 

12 

Q. Yeah. Why's that? 

13 

rules 

A. It would raise the question of what are the 

14 

of custody in that jurisdiction. 

15 

Q. Would it raise any question of what he did with 

16 

it at home? 

17 

A. It could. 

18 

he 

Q. And if he had Access at home on his computer, 

19 

could just insert a CD and make any changes he wanted, 

20 

couldn't he? 

21 

MR. DENKER: Object, form, foundation. 

22 

A. That's an assertion. I don't know that that's 

23 

true or not. 

24 

make 

Q. (By Mr. Risner) Well, what changes can you 

25 

with MS Access on your home computer to a database? 


make 
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1 

A. 

And have it still function within GEMS? 


2 

Q. 

Yeah. 


3 

A. 

I don't know. 


4 

Q. 

Well, do any of those reports that you're 


5 

familiar with, do they talk about what can be done or 


6 

not done? 


7 


MR. DENKER: Objection, form, foundation. 


8 

A. 

The reports talk extensively about theoretical 


9 

scenarios. 

a 

10 

Q. 

(By Mr. Risner) Uh-huh. Have you ever studied 


11 

GEMS 

database in MS Access, yourself? 


12 

A. 

I have. 


13 

Q. 

Were you able to see if you could manipulate, 


14 

change things and do stuff to the database? 

data. 

15 

A. 

I did not attempt to manipulate any of the 

you 

16 

Q. 

Yeah. Do you understand that you could — if 


17 

did do that, you could just go in and erase on the log 


18 

what 

your activities had been? 


19 


MR. DENKER: Objection, form, foundation. 


20 

A. 

On which log? 


21 

Q. 

(By Mr. Risner) On the GEMS audit log. 
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22 

A. 

And it be undetectable? 

23 

Q. 

Right. 

24 

A. 

I'm not aware of that. 

25 

Q. 

Are you aware that the GEMS audit log is part 


of 


54 

1 the database itself? 

2 A. Yes. 

3 Q. Okay. So if you deleted what your activity 

was, 

4 then how would you be able to detect what had 
occurred? 

5 A. File size would have changed, the file date 

size 

6 would have changed, the file time stamp would have 

7 changed. 

8 Q. So, those are the kinds of things that one 

would 

9 need to examine to determine if there had been 

10 manipulation of the database utilizing MS Access, 

11 correct? 

12 A. That would be among the evidence you would look 

13 at. 

14 Q. I think you said you saw the source code review 

15 of the Diebold voting system? 
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16 

A. Which report? 

17 

witness.) 

Q. The California one. (Hands document to 

18 

A. I'm aware of it, but I am not familiar with its 

19 

contents. This was one done at Berkeley, I believe. 

20 

Q. Right, University of California Berkeley, under 

21 

contract with the California Secretary of State. It's 

22 

the Diebold Source Code Review. 

23 

And they — one of their — in the executive 

24 

summary, it says: The Diebold system lacks adequate 

25 

controls to ensure that county workers with access to 

55 



1 

the GEMS central election management system do not 

2 

exceed their authority. 

3 

Do you agree with that or have any opinion on 

4 

that? 

5 

A. Do I agree with an assertion — 

6 

Q. Yeah. 

7 

A. — that an employee should not exceed their 

8 

authority in the execution of their duties? 

9 

Q. No. 

10 

A. Restate. 

11 

Q. It's not a question of whether they should. 

12 

A. I'm sorry. Restate the question. 
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13 

14 

15 

16 

17 

18 

definitions 

19 

20 
21 
22 

23 

24 

25 
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1 

2 

3 

4 

5 

what 

6 

7 

8 


Q. What they're saying is that the Diebold system 
lacks adequate controls to ensure that county workers 
with access to the GEMS central election management 
system do not exceed their authority. 

They further state: Anyone with access to a 
county GEMS server could tamper with ballot 

or election results and could also introduce malicious 
software into the GEMS server itself or into the 
county's voting machines. 

So, is this news to you, or do you — or does 
that conform with your understanding of GEMS? 

MR. DENKER: Object to the form and foundation. 

A. The assertion that the software itself lacks 


controls over employee access, is that — 

Q. (By Mr. Risner) Here, let me just — you can 
just read it there. 

A. Read the highlighted portion? 

Q. Yeah, just read — really read that. That's 

I was asking you about. Want to read it out loud? 

A. Certainly. 

Vulnerability to malicious insiders. The 
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Diebold 

9 system lacks adequate controls to ensure that county 

10 workers with access to the GEMS central election 

11 management system do not exceed their authority. 

12 Q. You can read the rest of that next sentence, 

too. 

13 A. Anyone with access to a county's GEMS server 

14 could tamper with ballot definitions or election 

results 

15 and could also introduce malicious software into the 

16 GEMS server itself or into the county's voting 
machines. 

17 Do I agree with that? 

18 Q. Yeah. 

19 A. It's an incomplete sentence, so I will say I do 

20 not agree with it, because what is implied there is 

21 undetected. 

22 Q. How can it be detected? 

23 A. Well, that's what the jurisdiction's rules and 

24 procedures are for. So, to assert that GEMS allows 

25 employees to exceed their authority without knowing 

what 

57 

1 authority has the jurisdiction given those employees, 

I 

2 don't know how you can assert that a software 
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3 

environment allows that access. What is the authority 

4 

of those employees? 

5 

Q. What do you mean by "authority"? 

6 

you 1 re 

A. Well, that's exactly my question. What — 

7 

citing that report. It says that the employees can 

8 

exceed their authority. What is that authority? 

9 

Q. Well, can we assume that they don't have the 

10 

authority to introduce malicious software? 

11 

guess, 

A. Yeah, you can assume anything you like, I 

12 

as long as we're making assumptions, but that specific 

13 

statement says that it lacks the controls that would 

14 

prevent employees from exceeding their authority. My 

15 

question is: What is their authority? 

16 

the 

Q. Yeah, but wouldn't you agree that nowhere in 

17 

United States would a county worker have authority to 

18 

introduce malicious software into GEMS? 

19 

A. I would agree with that. 

20 

Q. Yeah. And would you agree that they don't have 

21 

the authority to tamper with ballot definitions or 

22 

election results? 

23 

MR. DENKER: Object to form and foundation. 

24 

A. I would not agree with that. 

25 

Q. (By Mr. Risner) Yeah. Well, let's break that 
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1 

out. Do any county workers have authority to tamper 

2 

with election results? 

3 

A. What do you mean by "tamper"? 

4 

Q. Well, I think, "tamper," the way that I 

5 

understand that word, would be to change in an 

6 

inaccurate way. 

7 

A. Then I would agree with it. 

8 

Q. Yeah. Is "tamper" a part of your vocabulary? 

9 

How do you use the word? 

10 

A. If you're saying that "tamper" always has a 

11 

detrimental definition, then it does. You can tamper 

12 

for example, if you're talking about in reconciling 

13 

accounts — 

14 

Q. Yeah. 

15 

every 

A. — then GEMS has to be able to account for 

16 

we 

valid ballot, regardless of how it is cast. So, when 

17 

have a, for example, a failure on a piece of equipment 

18 

in a jurisdiction, say one optical scanner in the 

19 

be 

jurisdiction, if those ballots for some reason had to 

20 

into 

hand counted, you still have to enter those totals 
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21 

the vote totals. Is that tampering with the election 

22 

results? 

23 

Q. You consider that to be tampering? 

24 

A. I don't. 

25 

Q. Me either. 
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1 

A. Okay. Then we agree. 

2 

other 

Q. Well, that would be like rectifying or some 

3 

word. 

4 

A. And that's why I asked for the clarification, 

5 

in 

what do you mean by tampering. The ability to enter 

6 

election totals in the GEMS is a required part of that 

7 

system. 

8 

where 

Q. Yeah. Well, can you think of any examples 

9 

tampering isn't doing something that's improper? 

10 

A. I can't. 

11 

Q. Well, how about tampering with valid ballot 

12 

definitions, would that be appropriate for any county 

13 

worker anywhere? 

14 

A. Election databases are modified with each 

15 

election. 
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16 

Q. Yeah. 

17 

will 

A. So the ballot definitions off of a database 

18 

be changed with each election. 

19 

Q. Right. And once it's changed and set, later on 

20 

ballot 

that wouldn't be tampering, when they create the 

21 

definition, is it? 

22 

A. I would not consider it to be tampering. 

23 

Q. Yeah, tampering would be after that's done, 

24 

right? 

25 

A. Well, I don't — I don't know what the legal 
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1 

definition of tampering is, but I thought that it said 

2 

change ballot definitions. 

3 

Q. No. It says, could tamper with ballot 

4 

definitions. 

5 

A. Okay. Yeah. 

6 

Q. Yeah. So, nobody would have authority to do 

7 

that, right? 

8 

A. I would think not. 

9 

agree 

Q. Yeah, okay. So on each of these points, we 

10 

that no one anywhere could have authority to do it. 

11 

So, what they're saying is that the Diebold 
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12 

county 

system lacks adequate controls to ensure that the 

13 

workers with access to the GEMS central election 

14 

management system do not exceed their authority. 

15 

that 

So, do you agree with that, or do you think 

16 

the GEMS system does have adequate controls to ensure 

17 

that these county workers don't do that? 

18 

A. Well, I'm not sure it's the responsibility, the 

19 

exclusive responsibility of GEMS to provide all the 

20 

controls for that environment. 

21 

Q. Okay. 

22 

A. For example, GEMS does not provide the server 

23 

log-in controls. That's an operating system function. 

24 

ensure 

So you could criticize and say that GEMS does not 

25 

server log-in for its employees. It is not its 
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1 

responsibility. 

2 

Q. All right. So they say here that many of the 

3 

this is, again, University of California Source Code 

4 

Review. 

5 

A. Um-hum. 

6 

Q. And let me just ask you, are you aware of any 
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7 

other source code review by academics of the Diebold 

8 

voting system? 

9 

MR. DENKER: Object to form and foundation. 

10 

A. I can't think of any off the top of my head. 

11 

Q. (By Mr. Risner) All right. 

12 

MR. DENKER: Are you going to admit that into 

13 

evidence, that report, as an exhibit? 

14 

MR. RISNER: No, no, it's — it's way too thick 

15 

to do that, but you can go on the Internet and get a 

16 

copy. Just go to the California Secretary of State's 

17 

right 

web site. In fact, you could probably pull one up 

18 

now, if you wanted to. 

19 

MR. MARCH: If they'd let me set up my Wi-Fi. 

20 

Q. (By Mr. Risner) It says here, many of the 

21 

vulnerabilities of the Diebold system result from deep 

22 

architectural flaws. 

23 

Do you think this Diebold system has deep 

24 

architectural flaws? 

25 

MR. DENKER: Object to the form and foundation. 
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1 

the 

A. Yeah, I would not offer an expert opinion on 

2 

depth of those flaws. 


the 
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3 

Do I think it could be improved? Absolutely, 

4 

yes. 

5 

little 

Q. (By Mr. Risner) Then they have kind of a 

6 

from 

conclusion here. It says, again, I quote, this is 

7 

shortcomings, 

the executive summary, that: Due to these 

8 

Diebold 

the security of the elections conducted with the 

9 

system depends almost entirely on the effectiveness of 

10 

election procedures. 

11 

Do you agree with that? 

12 

A. I disagree. 

13 

Q. Yeah, okay. And in what way? 

14 

A. The phrase "almost entirely" is a sweeping 

15 

statement. 

16 

Q. Right. 

17 

A. I'm not sure I believe in anything almost 

18 

entirely. 

19 

Do I think that jurisdictions rely upon their 

20 

manual procedures to ensure integrity in their 

21 

elections? The answer's, absolutely, yes. 

22 

Q. You know, the sentence, security of elections 

23 

conducted with the Diebold system, they say "almost 

24 

entirely," you know, we could have said depends 

25 

entirely, and you wouldn't agree with that. 
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1 

A. 

Um-hum. 

2 

Q. 

So "almost entirely" is a little bit less. 

3 

A. 

Um-hum. 

4 

Q. 

How far down would you — what word would you 

5 

choose? 

6 

A. 

Give me some more choices. 

7 


MR. DENKER: Objection, form, foundation. 

8 

A. 

"Somewhat". 

9 

Q. 

(By Mr. Risner) "Mostly"? 

10 

A. 

"Somewhat". 

11 

Q. 

And their conclusion was that the safest way to 

12 

repair 

the system is to re-engineer it so that it's 

13 

secure 

by design. 

14 


So, if I understood your questions earlier, 

15 

you 1 re 

not aware of any way that, let's say, the 

16 

s 

Democratic Party or a hacker could access Pima 

17 

computer to insert any malicious code or hack into it? 

18 


MR. DENKER: Object to form, foundation. 

19 

A. 

I'm not aware. 

20 

Q. 

(By Mr. Risner) But you agree that insiders 

21 

could i 

do that, because they have access to the 


machine? 
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22 

23 

24 

25 


64 


1 

2 

3 

4 

5 

6 

7 

8 
9 

10 

11 

12 

13 

14 

15 

16 

17 


MR. DENKER: Objection, form, foundation. 

A. Undetected, I do not think that to be possible. 
Q. (By Mr. Risner) Okay. So how would they be 
detected? That's — 


A. I would have to look at the jurisdiction's 
controls that are in place for review of work product. 
I would have to look at the intermediate controls on 
product and process, where they're checked, before I 
could answer how it could be detected. 

Q. And who would do the detecting? 

A. It would depend on the jurisdiction. Again, in 
Pima County, the parties involved in L&A, for example, 
they may be a part of the detection process. The 
superintendent of elections, the registrar, could be a 
number of people involved. 

Q. So, is it your view, then, that the election 
integrity and the verification has to remain in the 
hands of the county election administrators? 

A. That is purely a jurisdictional issue. 

Q. Yeah. Well, let's assume that a political 

wanted to verify and do the kind of examination 


party 
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18 

necessary to see if there had been some malicious 

19 

activity that had occurred. Do you see any harm in 

20 

that? 

21 

MR. DENKER: Objection, form, foundation. 

22 

A. Without knowing the details — are they 

23 

qualified, what are they looking at, what's the time 

24 

lapse — that would be difficult to give a blanket 

25 

approval or disapproval. But I would say that's up to 
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1 

the jurisdiction. 

2 

ballot 

Q. (By Mr. Risner) In Georgia, your absentee 

3 

counts, how do they appear in your reports? 

4 

MR. DENKER: Objection, form, foundation. 

5 

A. Absentee ballots are considered a precinct, so 

6 

they're reported like every other precinct in the 

7 

jurisdiction. 

8 

Q. (By Mr. Risner) I'm not sure what you mean by 

9 

"considered a precinct." 

10 

report 

A. Well, that's a reporting unit within GEMS, 

11 

be 

votes by precinct, and although absentee ballots can 

12 

issued for every precinct within that jurisdiction, 


they 
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13 

mechanism 



14 

100 

15 

it. 

16 


17 


18 


19 


20 


21 


22 


23 


24 


25 


the 
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1 

precinct 

2 

3 

4 

5 

6 
7 


are themselves considered a precinct. It's a 
for reporting. 

Q. Okay. So, let's say your Georgia county has 
precincts. And you do number the precincts, I take 

A. The precincts have a code that designates the 
precinct, yes. 

Q. And people can, whatever, each of those hundred 
precincts, some people will submit an absentee ballot, 
correct? 

A. They may, yes. 

Q. Okay. And are those absentee ballot votes 
reported by their original precinct? 

A. The votes are not — the votes are mapped to 


races, but not to the precinct, not to the base 

of the vote. 

Q. So, in that — all hundred precincts in that 
county, then you report the vote totals by race as if 
the absentee ballots were all from one precinct? 

A. That's correct. 

Q. And those absentee ballots are paper ballots 
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that 

8 are counted on the AccuBasic optical scan readers? 


9 


MR. DENKER: Objection, form, foundation. 

10 

Q. 

(By Mr. Risner) Accuvote. 

11 

A. 

That's correct. 

12 

Q. 

And what do you all do in Georgia to audit or 

13 

confirm the accuracy of that count? 

14 

A. 

The count of the number of ballots or the votes 

15 

in the races on the ballots? 

16 

Q. 

Votes and races. 

17 

A. 

Well, all equipment is checked during L&A. 

18 

Q. 

So, what percentage of your votes in Georgia, 

19 

more 

or less, are absentee? 

20 

A. 

I couldn't say. 

21 

Q. 

Yeah. What are the requirements to submit an 

22 

absentee ballot? 

23 

A. 

The voter has to apply for an absentee ballot 

24 

from 

the election superintendent of their county. 

25 

Q. 

That's what I'm kind of getting at. You know, 


67 

1 Arizona, we used to say you wanted one because maybe 

you 

2 were going to be out of town or busy or had some 


excuse, 
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3 

ballots, 

and now we have this system, we call them early 

4 

of 

where anybody can ask for one. Do you all have kind 

5 

an excuse system, or can anybody just ask for one? 

6 

A. Those are two different criteria. We have a 

7 

period of early voting that precedes the election, and 

8 

during early voting, any voter can go in and vote in 

9 

person at the designated location in the county. 

10 

Q. That's where they go in and touch the screen? 

11 

A. That's correct. 

12 

Q. Yeah. So in the — these absentee ballots are 

13 

mailed in or delivered? 

14 

A. Mailed. 

15 

since 

Q. Okay. So, let's say, in our hypothetical, 

16 

you have no idea what percentage of votes these are in 

17 

the state, let's say, in this hypothetical county, 

18 

there's 1,000 absentee ballots that come in, and the 

19 

check 

votes are assigned to different races. How do you 

20 

to see that they were counted right? 

21 

live 

A. During L&A, all equipment is tested against 

22 

ballots for that race. 

23 

Q. Right. Yeah. 

24 

and 

A. When the ballots are received into the county 
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25 

verified, the external envelope is verified as being a 

68 



1 

are 

registered voter in that jurisdiction. The ballots 

2 

opened at the — at the opening of the polls and 

3 

scanned, and they check for completeness of runs. So, 

4 

if there's a thousand ballots, they check to make sure 

5 

for 

that there are a thousand ballots processed, looking 

6 

for 

ballots that may not process because they're torn or 

7 

whatever reason they won't scan. So, there is a total 

8 

on the number of ballots processed as to completeness. 

9 

And that's kind of a broad overview of how the 

10 

ballots are counted. 

11 

Q. But there's no audit to go back and see if the 

12 

machine really did it right? 

13 

ballots. 

A. Georgia does not require a hand audit of 

14 

MR. DENKER: Can we take a break for a minute, 

15 

please? 

16 

MR. RISNER: Yeah. 

17 

(Break taken, 11:16 to 11:26 a.m..) 

18 

Q. (By Mr. Risner) Are you familiar with the term 

19 

"security by obscurity"? 
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20 

A. I am. 

21 

Q. And what's — what's that mean in the computer 

22 

world? 

23 

A. Well, I think the intent of that is that, by 

24 

looking 

revealing more about a system, you get more eyes 

25 

at the system, and, ultimately, over a period of time 


69 


1 

you improve the security of the system. 

2 

Q. Yeah. 

3 

MR. MARCH: If you do security by transparency 

4 

March 

MS. FRIAR: Let the record reflect that Mr. 

5 

made a comment. 

6 

Q. (By Mr. Risner) Well, I thought security by 

7 

obscurity meant that you tried to keep people from 

8 

knowing what was going on. 

9 

A. That's correct. 

10 

approach. 

Q. And that was the security by obscurity 

11 

A. I'm sorry. I thought you meant what was the 

12 

argument against security by obscurity. 

13 

you 

Q. Ah, okay. So, in this election environment, 

14 

think that's a good thing, having security by 


you 
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obscurity? 


15 

A. Exclusively? 

16 

Q. Well, just what — what's your view on how that 

17 

argument or philosophy fits into the election? 

18 

A. I think it's a wonderful academic argument, 

19 

laudable goals, but difficult to implement. For 

20 

example, should passwords not be obscured? Should 

21 

sensitive data not be obscured? Every organization 

22 

risk. 

obscures data that they consider to be of security 

23 

is 

Your Social Security number, I assume, is obscure, as 

24 

mine. 

25 

Q. Well, it's not as obscure as I'd like. 
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1 

A. Exactly. 

2 

Q. Are you familiar with Greg Hoff's law (ph), the 

3 

late 18th Century — 

4 

MR. DENKER: Objection, form, foundation. 

5 

A. I am not. 

6 

seen 

Q. (By Mr. Risner) Yeah, me either. Have you 

7 

the inside of these R6s? 

8 

A. Yes. 

9 

MR. MARCH: R6 motherboard. 
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10 

Q. (By Mr. Risner) What's the particular — 

11 

particularly this section, what's the — 

12 

A. What is this? May I ask? 

13 

MR. DENKER: Can we identify the object? 

14 

MR. RISNER: I believe that's an inside of the 

15 

RS6 — 

16 

MR. MARCH: Motherboard of the R6. 

17 

MR. DENKER: Let the record reflect that Mr. 

18 

Risner has handed the witness a circuit board. 

19 

approximately nine-by-twelve inches. 

20 

MR. RISNER: Yeah. 

21 

Q. (By Mr. Risner) Well, take a look at this 

22 

section here. Tell me if you know what that is. 

23 

portion 

MR. DENKER: Mr. Risner is pointing to a 

24 

of the circuit board. 

25 

A. Jump switch settings. 
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1 

Q. (By Mr. Risner) And what are the different 

2 

choices there? 

3 

MR. DENKER: Object to form and foundation. 

4 

A. Are you asking me to read — 

5 

Q. (By Mr. Risner) Yeah. 
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6 

A. — what 1 s on this? 

7 

Q. Yeah. 

8 

A. There's a table that reads: Boot area 

9 

side, 

configuration, JP2, JP3, JP8, SW2, SW4, boot, side/ 

10 

XXX, one/one, illegal, on/off/on, one/two, E-Pron, 

11 

off/on/off, two/one, external flash, EST flash, 

12 

off/on/off, two/two, flash. 

13 

Q. So, can that machine be set to — to boot 

14 

differently — 

15 

MR. DENKER: Object to form and foundation. 

16 

Q. (By Mr. Risner) — from different areas of 

17 

memory? 

18 

A. This — I cannot attest that this is a 

19 

motherboard from an R6 device. So, are you asking me 

20 

if, in theory, whatever this is, can have an alternate 

21 

boot? 

22 

Q. Yeah. 

23 

table. 

A. I can't tell you that from looking at that 

24 

Q. Okay. Do you know whether the R6 can be booted 

25 

alternate 

from different parts of the memory? Are there 


1 

boots in the R6? 


72 
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2 

A. I do not know. 

3 

be 

Q. Would it be a security problem if the R6 could 

4 

changed to boot from different areas in memory? 

5 

MR. DENKER: Object to form, foundation. 

6 

A. I — I can't answer that without some context. 

7 

of 

If — are you saying, if there's more than one method 

8 

starting the system, does that make it inherently less 

9 

secure? 

10 

Q. (By Mr. Risner) Yeah, if it — if I'm getting 

11 

this right, it can — there would be, let's say, a 

12 

normal boot-up sequence, correct? 

13 

A. Well, there is a standard boot sequence for the 

14 

R6. 

15 

a 

Q. Yeah. If that could be changed, would there be 

16 

security implication in there? 

17 

MR. DENKER: Object to the form, foundation. 

18 

A. The security implication that would make it 

19 

perhaps more secure or perhaps less secure? 

20 

Q. (By Mr. Risner) No. What if it's loading 

21 

memory 

different code when you changed which part of the 

22 

it boots from? 

23 

MR. DENKER: Same objection. 

24 

A. I can't answer that. 
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25 Q. (By Mr. Risner) Okay. Well, you didn't know 


1 

2 

3 

4 

5 

6 

7 

8 
9 

10 

11 

12 

13 

14 

15 

16 

17 

18 

19 

20 
21 


that the machines — or you don't know whether or not 
R6s can be set to boot differently; is that right? 

MR. DENKER: Object to the form and foundation. 

A. I'm trying to recall some of the articles that 
have been written, but I cannot recall whether they've 
been able to successfully boot an R6 in election mode. 

Q. (By Mr. Risner) Do you still work with Britt 
Williams, or is he retired? 

A. I still see Britt from time to time, and he's 
still a part-time employee. 

Q. Of the election center? 

A. Of Kennesaw State University. 

Q. Kennesaw, yeah. 

In "security by transparency" models, do those 
involve freely handing out passwords or encryption 
processes? 

MR. DENKER: Objection, form, foundation. 

A. I don't know. 

MR. RISNER: I think that's all the questions I 

have. 


MR. MARCH: He has one more, one more thing. 


Case l:17-cv-02989-AT Document 441 Filed 07/01/19 Page 166 of 443 


22 MR. RISNER: Oh. 

23 Q. (By Mr. Risner) Do you believe the election 

24 integrity has to be left in the hands of county 
election 

25 administrators, in other words, that we need to trust 

74 

1 those officials? 

2 MR. DENKER: Objection, form, foundation. 

3 A. I believe each jurisdiction has its own laws, 

4 rules and regs that specify who is responsible for 

5 election integrity and that I'm required, as a 

citizen, 

6 to uphold the law. 

7 Q. (By Mr. Risner) Do you think it would be a 

good 

8 idea to just leave a system where you trusted these 

9 guys? 


10 


MR. DENKER: Objection 

to form, foundation. 

11 

A. 

Which guys? 


12 

Q. 

(By Mr. Risner) County 

election officials. 

13 

A. 

Trust blindly or — 


14 

Q. 

Yeah. 


15 

A. 

Well, of course not. 


16 

Q. 

I mean, there's kind of 

like a history in this 
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17 

country of people trying to influence elections by 

18 

isn 1 1 

changing votes or rigging them one way or another, 

19 

there? 

20 

A. There have certainly been instances, 

21 

interestingly enough, all relegated to paper ballots. 

22 

but, yes. 

23 

Q. Are you aware of any instance in the United 

24 

States where outsiders tried to hack into a computer 

25 

election system? 
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1 

MR. DENKER: Objection to form, foundation. 

2 

A. Successfully, or merely made the attempt? 

3 

either 

Q. (By Mr. Risner) Either way. I'll take it 

4 

way. 

5 

on 

A. Do you consider manipulating the GEMS version 

6 

that laptop attempting to alter elections? 

7 

get 

MR. MARCH: No, because we've never tried to 

8 

it back into — 

9 

MR. DENKER: Was Mr. March's outburst in the 

10 

record? 

11 

COURT REPORTER: Yes. 
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12 

A. 

Then my answer's, no, I'm not aware of a case 

system. 

13 

where 

outsider's have attempted to hack into the 


14 

Q. 

(By Mr. Risner) Just to — I didn't quite 


15 

understand you, but was your implication: Because 

to 

16 

someone has GEMS, that that is related to an attempt 


17 

hack 

into the system? 

of 

18 

A. 

A licensed copy of GEMS or an illegal version 


19 

GEMS? 



20 

Q. 

Well, just either way, either way. 


21 

A. 

I — I would not make that assumption. 

to 

22 

Q. 

Yeah. Now, what's the importance of a license 


23 

have 

a copy of GEMS? 


24 


MR. DENKER: Object to form, foundation. 

25 

copyright 

A. 

Are you asking what's the importance of 


76 

1 and intellectual property licensing? 

2 Q. (By Mr. Risner) Yeah, what's the importance of 

3 having a licensed copy of GEMS? 

4 MR. DENKER: Objection, form, foundation. 

5 A. I think most people who subscribe to the ACM 


Code 
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6 of Ethics, Association for Computer Machinery Code of 

7 Ethics, acknowledge that using unlicensed copies of 

8 software is unethical. 

9 Q. (By Mr. Risner) Does GEMS license their 


10 

database? 

11 

A. 

Not that I'm aware of, but it is certainly 

12 

copyright protected. The structure of the databases 

13 

copyrightable. 

14 

Q. 

But the database itself is not something one 

15 

licenses, correct? 

16 

A. 

I would assume not. 

17 

Q. 

Can Fair Use Law apply? 

18 


MR. DENKER: Objection, form, foundation. 

19 

A. 

Well, is there a — I'm not sure what you're 

20 

asking 

■ 

21 

Q. 

(By Mr. Risner) Is there something called Fa. 

22 

Use? 


23 

A. 

Are there Fair Use exceptions? 

24 

Q. 

Yes. 

25 

A. 

There are Fair Use exceptions to copyrights. 


1 Q. But in terms of your understanding, GEMS itself 

2 is licensed, but the database is not, correct? 
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3 

MR. DENKER: Objection, form, foundation. 

4 

A. I — I do know that GEMS is a licensed software 

5 

on 

product, and I'm unaware of any licensing requirement 

6 

any work products, any databases produced by GEMS. 

7 

MR. RISNER: Yeah. Okay. That's all I have. 

8 

MR. DENKER: All right. Let's take a break for 

9 

just a moment. Thank you. 

10 

(Break taken, 11:43 to 11:57 a.m..) 

11 

EXAMINATION 

12 

BY MR. DENKER: 

13 

Q. I just have a few follow-up questions here. 

14 

on 

And I just want to make sure that we have this 

15 

the record and that I'm properly stating this. Merle, 

16 

did you say that one of your concerns in handing over 

17 

the elections database to outside private entities is 

18 

that they can determine certain elements of the 

19 

structure of the database? 

20 

A. That's correct. 

21 

Q. And when we talk about "database," database in 

22 

quotes, are we talking about the MDB files? 

23 

A. Yes, we are talking about the MDB files. 

24 

Q. And what is a GB file? 

25 

A. GBF file is a post process MDB file by GEMS 


which 
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78 


1 

essentially 

is compressed into a write-only format. So, 

2 

the GBF file is a GEMS stored version of the MDB file. 

3 

Q. In your opinion — I'm sorry. Did I interrupt 

4 

you? 

5 

A. No. 

6 

different 

Q. Okay. Scratch that. Let me ask you a 

7 

question. 

8 

that 

Can GEMS generate a ballot without the SQLs 

9 

reside in the MDB file? 

10 

file, 

A. GEMS requires the entire content of the MDB 

11 

including the SQL queries, to produce the ballot. 

12 

Q. Can GEMS generate a report without the SQL 

13 

queries in the MDB file? 

14 

A. I'm not aware that they can. 

15 

Q. Can GEMS process an election without the SQL 

16 

queries in the MDB file? 

17 

A. It cannot. 

18 

Q. And I just want to clarify something from 

19 

earlier. When we were talking about hash codes, Mr. 

20 

Risner was asking a series of questions regarding hash 
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21 codes, can you get a hash total from the database? 

22 A. You can. 

23 Q. And is that hash total going to change as you 
use 

24 the database? 

25 A. Any modification made to the file will result 
in 

79 

1 a different hash code produced by hashing the file. 

2 Q. Do the answers that you gave to the last two 

3 questions have anything to do with whether the NDB 

file 

4 is a computer program under the definition of 


5 

ARS 16 

-444? 




6 

question. 

A. 

I'm going 

to have to remember 

the 

last 

7 

hash 

Q. 

Well, the 

first question was: 

Can 

you 

8 

total 

of the — 

of an MDB — 



9 

A. 

Yes. 





10 Q. And the second question is: Is it going to 

11 change — 

12 A. The production of a hash total off of any file, 

13 including an MDB file, is independent of the question 
of 

14 whether it's a computer program or not. 
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15 

asking. 

Q. Okay. That's exactly the question I was 

16 

One of the areas in which you've been asked to 

17 

render an opinion is the area of security of the Pima 

18 

County election system, in particular security in the 

19 

context of releasing the MDB file to the public. 

20 

of 

Would it, in your opinion, constitute a breach 

21 

security if we were to make it possible for a private 

22 

party to generate a false set of election returns that 

23 

set 

are forensically indistinguishable from the official 

24 

of election returns, would that be a security risk? 

25 

A. That would be an enormous security risk. 

80 



1 

Q. Do you have an opinion about, in general, the 

2 

trustworthiness of electronic voting, that is to say 

3 

let me define that a little better — the use of DRE 

4 

systems in comparison with other election systems, for 

5 

example, paper ballots, punch card ballots, black and 

6 

white marbles? 

7 

A. DRE systems are more reliable in terms of 

8 

processing of information than any paper-based or 

9 

mechanical-based system. 
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10 

software, 

Q. In your opinion, can any software, user 

11 

be expected to provide all of the security for the 

12 

environment in which it's used? 

13 

A. No. 

14 

Q. Can it be expected to provide all the security 

15 

for the users or the results obtained from using the 

16 

software? 

17 

A. No. 

18 

Q. Are you familiar with the Brennan Center study? 

19 

A. I've read more than one Brennan Center report. 

20 

Q. Okay. I haven't, so I'm not sure how to 

21 

let 

distinguish them for purposes of the question. So, 

22 

me ask you — let me ask this question in a different 

23 

way. Is there a risk, a security risk, or could you 

24 

foresee a security risk, if a private party had the 

25 

ability to produce their own copies of the official 

81 



1 

ballot for an election prior to the election? 

2 

A. Yes. In Georgia, we have a code that requires 

3 

SOS code that requires that all ballots be — all live 

4 

ballots be stamped as "sample" prior to an election. 

5 

Q. So, if I had the ability, at home or elsewhere, 
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6 

if 

outside the confines of the official election system, 

7 

of 

I had the ability to produce copies, official copies 

8 

the ballot for an election, and multiple copies, would 

9 

that represent a security risk, in your opinion? 

10 

A. It would, especially in an optical scan 

11 

jurisdiction. 

12 

scan 

Q. Do you consider Pima County to be an optical 

13 

jurisdiction? 

14 

A. I do. 

15 

MR. DENKER: I believe that's all I have. 

16 

EXAMINATION 

17 

BY MR. RISNER: 

18 

of 

Q. Yeah, Mr. King, you responded that a false set 

19 

returns would be an enormous security risk. What are 

20 

you talking about? 

21 

could 

A. A counterfeit set of election returns that 

22 

create confusion in the public's mind about which 

23 

constitute the official results of an election. 

24 

Q. Okay. What's a counterfeit set of election 

25 

returns? 


82 
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1 

A. 

An election report that's erroneous but mimics 

system. 

2 

the reports produced by the election management 


3 

Q. 

I want to make sure I understand what you're 


4 

talking about. So, where would this report come from? 


5 

Where 

would that data come from? 


6 


MR. DENKER: Objection to form, foundation. 


7 

A. 

Are you asking where would the counterfeiters 


8 

acquire the information? 


9 

Q. 

(By Mr. Risner) Okay. 


10 

A. 

If they had access to the MDB files for a live 


11 

election — 


12 

Q. 

Yeah. 

embed 

13 

A. 

— they could fabricate their own results, 

an 

14 

that 

into the system and present it as the results of 


15 

election. 


16 

Q. 

What do you mean "embed" it in the system? 


17 

What 1 

s that mean? 


18 

A. 

Embed it into the MDB tables, enter it into the 


19 

tables. 


20 

Q. 

I don't — now I'm not following this. So how 


21 

would 

they — how would they get this? We're talking 


22 

about 

, like us, say the Democratic Party — 


23 

A. 

Um-hum. 
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24 

election 

25 


Q. — if the county gave us a copy of their 

database — 


83 


set 


1 

A. 

Um-hum. 


2 

Q. 

— when the election's over, is that — at 

what 

3 

point 

in time did you assume that the Democratic 

Party 

4 

would 

get a copy of the election database? 


5 

A. 

Well, I didn't assume that the Democratic 

Party 

6 

would 

get a copy of the election database. You asked 

7 

me — 



8 

Q. 

Well, did your answer assume — 


9 

A. 

Well, you asked me how could a counterfeit 

copy 

10 

of election results be produced. 


11 

Q. 

No. No. Your lawyer asked you a question 

i 

12 

right 

? 


13 

A. 

He's asked several questions, yes. 


14 

Q. 

Yeah. And he asked you one about this false 

15 

of returns. 


16 

A. 

Um-hum. 


17 

Q. 

What did you — tell me what — if you could 

18 

explain to me what he was asking so that I'll 



understand 
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19 

your 

answer a little better. 


20 


MR. DENKER: Objection to form, 

foundation 

21 

Q. 

(By Mr. Risner) Yeah. 


22 

A. 

May we ask the reporter to read 

back the 

23 

question? 


24 

Q. 

Well, yes, you could — 


25 

A. 

Yes, please. 



84 


set 


1 

2 

3 

4 

5 

6 

7 

8 
9 


Q. — but I don't — sure. 

(Following read by court reporter: "Question: 
Would it, in your opinion, constitute a breach of 
security if we were to make it possible for a private 
party to generate a false set of election returns that 
are forensically indistinguishable from the official 

of election returns, would that be a security risk? 
Answer: That would be an enormous security risk.") 

A. So, your question to me was: Why is that an 


10 

enormous security 

risk? 

11 

Q. 

No. 


12 

A. 

Oh. 


13 

Q. 

This is an 

area where 

14 

to render an opinion, right? 


asked 
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in 


85 


15 

A. 

Correct. 

16 

Q. 

Okay. Now, if they released the — what is it 

17 

that 

he was asking would be released to the public? 

18 

What 1 

s your understanding of what would be released to 

19 

the public? 

20 

A. 

The election database. 

21 

Q. 

Yeah. When? At what point in time? 

22 

A. 

He didn't specify. 

23 

Q. 

Does it matter to you? 

24 

A. 

Yes. 

25 

Q. 

Okay. So, in your opinion, you must have had, 


was, 


2 

3 

4 

5 

6 

7 

8 
9 

10 


your own mind, an idea of when in the process that 

since it mattered to your opinion. 

A. Yes. 

Q. Yeah. When did you think he was talking about? 
A. I assumed during the election. 

Q. Okay. And what does that mean, "during the 
election"? 

A. Before the election is certified by the 
jurisdiction. 

Q. Okay. And so if it's after the election is 
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11 

certified by the jurisdiction, is your opinion 

12 

different? 

13 

A. Slightly different. 

14 

Q. How would it be different? 

15 

a 

A. It goes from being an enormous security risk to 

16 

high security risk. 

17 

would 

Q. Okay. So, if it's after certification, why 

18 

it be a high security risk? 

19 

A. I think that the revelation of the architecture 

20 

of the database, in and of itself, is a security risk, 

21 

That 1 s 

because it reveals the organization of the data. 

22 

a critical requisite piece for a hacker to begin to 

23 

mount a hack against an election. 

24 

Q. Okay. So you're saying it would be a high 

25 

security risk for the next election, not for that 

86 



1 

election; is that correct? 

2 

A. It would be a high security risk for all 

3 

It 

subsequent elections within and without Pima County. 

4 

would still be, I think, a potential security risk for 

5 

the current election, because what is the assumption 
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I'm 

6 

about 

the skill set of the recipients of the user — 


7 

sorry 

— the recipients of that MDB file. 


8 

Q. 

Why would it be a security risk for the current 


9 

election after the election had been certified? 


10 

A. 

To create confusion on the part of the public's 


11 

mind 

about what are the official results of the 


12 

election. 

in 

13 

Q. 

Are you aware of that ever happening anywhere 


14 

the United States of America? 


15 

A. 

Of what happening? 

the 

16 

Q. 

Where someone got a copy of a database after 

was. 

17 

election and sowed confusion as to what the outcome 


18 

A. 

I'm aware that people contest elections all the 


19 

time 

and dispute the counts of elections. 


20 

Q. 

Yeah. 

file 

21 

A. 

Whether they have done so with the GEMS MDB 


22 

or not, I do not know. 

can 

23 

Q. 

Well, of course, someone can. You know, they 


24 

have 

a recount or a specific challenge. But I thought 


25 

you said that someone would just be sowing confusion. 


87 
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1 

MR. DENKER: Object to form, foundation. 

2 

A. I said it could create confusion about the 

3 

released 

official results of an election if the MDB file 

4 

to the public is used to produce counterfeit results 

5 

Q. (By Mr. Risner) What would be the purpose of 

6 

someone producing counterfeit results? 

7 

A. I can't speculate on that. 

8 

Q. Well, why not? I mean, how can you have an 

9 

opinion about the security risk if you can't even 

10 

speculate on it? 

11 

A. Well, speculate on the motives of why people 

12 

would produce counterfeit results? 

13 

Q. Sure. 

14 

A. Why people commit election fraud? 

15 

I'm 

Q. Election fraud maybe is a separate question. 

16 

asking about counterfeit results. 

17 

certainly 

A. Well, I think counterfeit results would 

18 

fall under most jurisdictions' statute of election 

19 

fraud. 

20 

Q. Okay. Well, I don't understand this. 

21 

A. Why people commit election fraud? 

22 

Q. Merle, I don't understand what you're talking 

23 

about, so you really have to help me out here. 
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24 

A. Okay. 

25 

Q. Let's say that Pima County gives the Democratic 

88 



1 

Party a copy of the database, you say after the 

2 

election's certified. Okay? 

3 

A. Um-hum. 

4 

Q. And let's assume they give it to the Republican 

5 

it, 

Party, because we believe all political parties get 

6 

that 

and the Libertarian party. Okay? And let's assume 

7 

confusion. 

one of these political parties decides to sow 

8 

What would they do? 

9 

would 

A. Are you asking me to speculate on what they 

10 

do? 

11 

a 

Q. Sure. Heck, yes. It's your opinion that it's 

12 

high risk. Obviously you have some thoughts in this 

13 

matter. 

14 

A. Produce election reports using purloined copies 

15 

of GEMS that mimic official election results. 

16 

hold 

Q. Yes. Then what is going to happen? They'll 

17 

a press conference? 


hold 
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18 

A. Perhaps. 

19 

Q. Now, if it's before it's certified, same deal? 

20 

that 

A. Well, I think the risk is perhaps greater at 

21 

point. 

22 

Q. Okay. Why? 

23 

A. In order to mount a successful hack on a live 

24 

of 

election, the hacker would need to know the structure 

25 

the database. So putting that database into the wild, 

89 



1 

while the election is still live, would be a 

2 

considerable risk. 

3 

Q. Which part of the structure would create the 

4 

risk? 

5 

MR. DENKER: Object to form, foundation. 

6 

A. My opinion would be that the entire structure 

7 

needs to be protected. 

8 

Q. (By Mr. Risner) Yeah, which part of the 

9 

structure would create the risk? 

10 

A. Not exclusively, but the user IDs and the 

11 

passwords. 

12 

Q. And how would a political party on the outside 

13 

get the hacked database back into the county's 
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computer? 




14 


MR. DENKER: Objection, form, foundation. 

be 

15 

A. 

I can't speculate on that. That would either 


16 

their 

method of hacking the election or how they might 


17 

go about it. 

have. 

18 

Q. 

(By Mr. Risner) That's all the questions I 


19 

Well, 

wait, wait. 


20 


MR. MARCH: Two things. Two items. 


21 


MR. RISNER: Hold on. 

GEMS 

22 

Q. 

(By Mr. Risner) Let me ask you this. Does 


23 

use the SQL portion of the database to create ballot 


24 

layouts? 


25 

A. 

What do you mean by "ballot layout"? 

90 

1 

Q. 

Ballot format. 


2 


MR. MARCH: Definition. 


3 

Q. 

(By Mr. Risner) Definition. 


4 

A. 

Those are all three different things. 


5 

Q. 

Okay. Make it three different questions. 


6 

A. 

It uses the SQL to produce the ballot layout. 


7 

Q. 

Earlier I thought you said that the SQL was 


used 
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8 

9 

10 

11 

12 

13 

14 

15 

16 

17 

18 

19 

20 
21 
22 

23 

24 

25 


for creating reports. 

A. Displays, reports and displays. 

Q. So, you think that GEMS uses the SQL in the 
database also to create ballot layouts? 

A. Layout is a display. 

Q. Huh? 

A. Layout is a display. 

Q. What else is displayed that's created by SQLs 

the database and not in GEMS itself? 

A. Well — 

MR. DENKER: Object to form, foundation. 

A. — I would have to look at the reports to give 
you a list of what's generated. 

Q. (By Mr. Risner) Have you talked to Diebold 
personnel about what SQL does in the database? 

A. I've had conversations with Diebold — I'm 
sorry — Diebold, or now Premier, personnel on the 
function of the queries and the tables in the GEMS 


1 database. I can't recall specific conversations about 

2 the SQL. 

3 Q. Are you relying on what they told you for any 
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4 

your opinions in this case? 

5 

A. No. 

6 

anyone 

Q. Are you relying on any written reports by 

7 

for your opinions in this case? 

8 

A. I'm not sure I understand your question. My 

9 

opinions are the culmination of reading a lot of 

10 

reports — 

11 

Q. Okay. But in terms of the — 

12 

A. — including the Brennan report, the Berkeley 

13 

report, the SAIC report, the Robert report. 

14 

queries 

Q. Really what I'm thinking about is the SQL 

15 

in the database. Is there any written report that 

16 

discusses that or its function? 

17 

A. Not that I can recall. 

18 

MR. RISNER: That's all I have. 

19 

EXAMINATION 

20 

BY MR. DENKER: 

21 

and 

Q. I just wanted to clarify one — one question 

22 

answer. And what I understood the question to be was, 

23 

the 

how do they get it back into the county system, was 

24 

question that Mr. Risner had asked you. And you said 

25 

you can't speculate as to what their method would be. 
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1 

question 

What was your understanding of what that 

2 

was and what was your answer to that? 

3 

A. Well, I understood counsel to ask me about a 

4 

specific technique for an intrusion, which was to take 

5 

the modified database back into the GEMS environment. 

6 

And one of the difficulties in dealing with hackers is 

7 

that their methods are constantly evolving, so it's 

8 

challenging to speculate on a specific strategy that 

9 

someone would use to hack an election. 

10 

Q. Okay. In that case, then, I do have another 

11 

question. Would there be a security risk associated 

12 

with a private party's ability to generate a false set 

13 

of election returns, even if they did not return it to 

14 

the county's election system computers? 

15 

A. I — I'm struggling with an answer to that 

16 

question, because unless you know how the election 

17 

results are certified, it's difficult to know where 

18 

potential insertion points are for a bogus report in 

19 

that system. 

20 

Q. Okay. 

21 

A. So the insertion could come after it leaves a 

22 

at 

server in a facility, and I think you'd have to look 
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23 

the — the spectrum of activities that surround the 

24 

tabulation and the reporting of results. 

25 

Q. Fair enough. 

93 



1 

MR. DENKER: That's all I have. 

2 

EXAMINATION 

3 

BY MR. RISNER: 

4 

Q. I have a question. Are you aware of any hacker 

5 

strategy that does not require access to a computer? 

6 

A. Oh, yeah. 

7 

Q. Tell me about them. 

8 

fishing 

A. There is some time-honored traditions of 

9 

through garbage cans to get data. Hacking does not 

10 

necessarily mean restricted to a computer system. 

11 

Hackers hack into information systems using mechanical 

12 

methods, social engineering. 

13 

Q. So, when you use the term "hacking" into a 

14 

computer, that includes going through garbage and 

15 

reading data? 

16 

A. Could. 

17 

I'm 

Q. So, define "hacking into a computer" for me. 

18 

befuddled. 
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19 

all 

A. One of the reasons that most facilities shred 

20 

of their reports, or in some cases shred and burn on 

21 

site their reports, is that printed hard copies often 

22 

contain access code information, log-ins, et cetera. 

23 

on 

So, the initial starting point for a hack may not be 

24 

phone 

a computer. It may be through social engineering, 

25 

calls, site visits, et cetera. 

94 



1 

Q. What's "social engineering"? 

2 

A. Try to extract data from users through 

3 

manipulation, through telephone conversations, 

4 

face-to-face conversations, et cetera. 

5 

Q. Okay. So, let's assume that a very successful 

6 

social engineering went on, and some outsiders got the 

7 

password — 

8 

A. Um-hum. 

9 

Q. — and went through the garbage. How are they 

10 

going to get whatever information they want into a 

11 

central computer? 

12 

MR. DENKER: Object to form, foundation. 

13 

A. What's the architecture of the computer? 

14 

Q. (By Mr. Risner) Well, the computer is not on 
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the 


15 

network, 

Internet, doesn't have Wi-Fi, is not part of a 

16 

go 

and is sitting in a rack with observable cables that 

17 

to it only — 

18 

A. Urn-hum. Um-hum. 

19 

are 

Q. — in a locked room, with cameras on it. How 

20 

they going to get that into that computer? 

21 

A. I don't know. 

22 

Q. I'll accept that answer, sure. You can't think 

23 

of a way, can you? 

24 

A. No, I can think of a way, but you asked me how 

25 

would they do it. If you're asking me what are the 

95 



1 

possible methods? 

2 

Q. Yeah. Sure. Tell me. 

3 

A. The unit goes out for repair. 

4 

Q. Ah, okay. Got anything else? 

5 

A. Well, that's an example. 

6 

Q. Yeah, that's one, yeah. Got a two or three? 

7 

A. Not off the top of my head. 

8 

Q. Okay. And if it goes out to repair, then that 

9 

gives someone the opportunity to physically access the 
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are 


10 

machine? 



11 

A. That's correct. 



12 

Q. Without physically accessing the 

machine, 

how 

13 

they going to do it? 



14 

A. Well, again, you have to know the 

continuity of 

15 

how the election results are reported. 

Those results 

16 

are not instantly certified in the GEMS 

server. 

So 

17 

those results have to somehow leave the 

GEMS server 

18 

before they're certified by the election 




superintendent, 

19 

20 
21 

prior 

22 

23 

media 

24 

25 


the county or the secretary of state, whoever is 
responsible for certification. 

So, what happens when it leaves that system 

to certification is also part of the vulnerability in 
that system. Is it written to media? How is that 

transported? Who transports the media? What's the 
chain of custody for the media? 


96 


it 


2 

3 


Q. Sure. But then you can go back and re-create 

by getting, you know, and checking the original 
computer, correct? 
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4 

multiple 

5 

6 

7 

8 
9 

10 

11 

12 

13 

14 

15 

16 

17 

18 

19 

20 
21 
22 

23 

24 

25 


A. You can produce multiple versions of — 
copies, I should say, of reports. 


Right. 




MR. RISNER: 

Okay. 

That's all I 

have. 

MR. DENKER: 

We 1 re 

finished. We 1 

'll read and 


sign. 


* * * * 


(Whereupon deposition concluded at 12:31 p.m..) 


MERLE KING 


97 
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1 CERTIFICATE 


2 

State Of Arizona ) 

3 

) ss 

4 

County of Pima ) 

5 

BE IT KNOWN that I, Mary Meyer, R.P.R., took the 

6 

and 

foregoing deposition pursuant to Notice at the time 

7 

and 

place stated in the caption hereto; that I was then 

8 

of 

there a Certified Court Reporter in and for the State 

9 

Arizona; that by virtue thereof, I was authorized to 

10 

before 

administer an oath; that the witness, MERLE KING 

11 

testifying, was duly sworn according to law, and that 

12 

the testimony of the witness was reduced to writing 

13 

under my direction. 

14 

I DO FURTHER CERTIFY that I am not of counsel nor 

15 

cause 

attorney for either or any of the parties to said 

16 

I 

or otherwise interested in the event thereto, and that 

17 

am not related to either or any of the parties to said 

18 

action. 

19 

(X) Pursuant to request, notification was provided 

20 

that the deposition is available for review and 

21 

signature. 

22 

( ) Deposition review and signature was waived 
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23 WITNESS MY HAND THIS 17th day of November, 2007. 

24 _ 

25 Mary Meyer, R.P.R., Certified Reporter 50225 
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UNITED STATES DISTRICT COURT FOR 
THE NORTHERN DISTRICT OF GEORGIA 
ATLANTA DIVISION 


) 

) 

) 

) 

) CIVIL ACTION NO.: 

) l:17-cv-2989-AT 

) 

) 

) 

) 

) 

) 

SUPPLEMENTAL DECLARATION OF MATTHEW D. BERNHARD 

MATTHEW D. BERNHARD declares, under penalty of perjury, pursuant 
to 28 U.S.C. § 1746, that the following is true and correct: 

1. This declaration supplements my previous declaration of August 03, 
2018 [Doc. 258-H 33-42], 

2. The opinions expressed at the time of the previous declaration 
continue to represent my opinions 

3. To assess whether the inadequacies of Georgia’s voting system have 
had an impact on election results, a good first step is to examine the accuracy of 
the data used by the system to configure the voting machines. 

4. This data is stored in the GEMS database, and while there are 
numerous avenues by which data in the database may be corrupted prior to its 
entry into the database, once bad data is in the database, it has the potential to 
significantly impact the functionality of the rest of the voting system, including but 
not limited to the election management system, the electronic poll books, and the 
voting machines themselves. Examining the database is an useful step to determine 
whether the voting system has errors, bugs, or malicious code that may have had 
an impact upon election outcomes. 


CURLING, et al. 

Plaintiffs, 

vs. 

BRAD RAFFENSPERGER, et al. 
Defendants. 
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5. The detailed analysis of the GEMS database sought by the Coalition 
Plaintiffs is labor intensive clerical work: examining the data in the table for any 
inconsistencies (like candidate identifiers not matching or candidates not appearing 
in a race where they should). Potential mistakes can be flagged by analysts without 
extensive knowledge of computer science. 

6. The fact that the GEMS database is not sensitive is reflected in the 
fact that it is distributed to every county in Georgia and accessed by thousands of 
poll workers across the state. All 159 counties have multiple copies of GEMS 
databases which appear to be accessible without restriction by election staff. 
Allowing the plaintiffs to examine the database creates no additional risk. 

DATABASES AND MICROSOFT ACCESS 

7. Databases are a well-studied and developed field of computer science, 
and nearly every computer application in existence has some interaction with a 
database. The most common kind of database is a relational database, where data is 
stored as a series of tables and entries that have some kind of relation with other 
similar pieces of data. Common relational database applications include SQL and 
Microsoft Access. 

8. Because certain data types in the database can have arbitrary length, if 
a program is reading from the database and does not properly account for the 
length of the data, it may accidentally read so much data that it overwrites its own 
program. This is what is known as a buffer overflow (a buffer is where data is kept 
when it is being read out of a file or database). Overflows may occur due to 
incorrect lengths being specified in the database, improperly formatted character 
sequences, or simply data that is unexpectedly long. A clever attacker can craft 
data that, when the program reads the data in, results in a buffer overflow and 
overwrites the original program with code that the attacker wrote. This is a buffer 
overflow attack, or an exploitation of a buffer overflow, and it is one of the most 
common ways that hackers gain unauthorized access to systems. 

9. Even though the data in the database is not treated as code that can be 
executed by a computer, if the data overwrites a piece of the program that is 
reading the data it will be executed by the computer as if it were part of the 
program. Even in the absence of malicious intent, a buffer overflow vulnerability 
can result in unexpected or undetected behavior by a program. 
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10. Another common threat vector for database programs (in particular 
Microsoft Access) is the use of macros, which are small programs that can be 
written inside the database program to assist in arduous or repetitive tasks. These 
macros, while powerful, also present a major security vulnerability to most 
database engines, as malicious macros can take over the database software and 
corrupt data. 

11. However, even if macros are entirely disabled, if data in the database 
is not formatted in a way that the program reading it expects, it can still lead to a 
buffer overflow. Regardless of whether macros are enabled or not, data that exists 
in the database can still result in unexpected or malicious behavior to occur in the 
program that is reading the data. 

THE GEMS DATABASE 

12. The GEMS database contains all data used by the GEMS system to set 
up an election, program poll books and voting machines, and tabulate results. In 
many states, including Arizona, Colorado and California, the database is publicly 
available for scrutiny. In examples of the GEMS database which I have examined, 
from multiple jurisdictions using multiple versions of the GEMS software, no data 
contained in the database poses a privacy threat to voters or exploitation of the 
voting system by being disclosed. The structure of the database is disclosed in 
GEMS manuals that have been publicly available since the system was first put in 
service. 1 

13. GEMS databases are Microsoft Access databases, and can be opened 
by any Microsoft Access program. 

14. The tables in the GEMS database store a variety of information about 
an election (see Exhibit TK), including candidate names and party affiliation, 
jurisdictions, information about the voter access cards, ballot styles, how election 
results should be reported, precincts, polling locations, ballots layout, and so on. At 
the conclusion of the election, results are also written into the database, including 
how many votes were cast on each machine in each precinct, how many votes were 
cast for each candidate, the number of write-in votes, and so forth. 

15. An error in the data entry into the GEMS database, such as switching 
the two identifiers for two candidates, could have an impact on the outcome of an 
election without being easily detected. Worse, if an error in the database causes a 


1 For an example, see : http://blackboxvoting.org/docs/diebold/GEMS 1.18 Users Guide Revision 12.pdf 
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buffer overflow, the error may not be reported in subsequent data reporting 
mechanisms by the GEMS system, like the system report PDFs that GEMS can 
generate. The only way to know if there is bad data in the database which might 
cause unexpected behavior when in use is to examine the database itself. 


16. Example of other errors that a clerical review of the GEMS database 
may detect include: 

• Mathematical errors in vote tallies and the formulas that generate 

them; 


• Inaccurate inclusion or exclusion of precincts or voters permitted to 
vote on certain races; 


• Switching candidate numbers causing the votes to be recorded for the 
wrong candidate; 

• Failure to upload all voting machine memory cards containing votes 
on election night (a well-documented, frequent error); 

• Discrepancies between poll tape reports and officially reported vote 

tallies; 

• Identification of malfunctioning machines with anomalous results; 

• Leaving a candidate or question off certain ballots in error. 

• Failure to properly add all eligible provisional ballots. 

• Odd data formatting that may induce unexpected behavior by various 
components of the voting system, including but not limited to GEMS and the 
voting machines. For example, if a precinct name was “pasted” into the table, the 
name may include control characters that the database engine or programs which 
use the database may not expect. 


17. If the initial review of the GEMS database fails to identify any 
anomalies, this does not fully exonerate the system. However, it will provide much 
better footing with which to target the evaluation of other components of the 
system forensically, and would rule out the hypothesis that incorrect configuration 
is the cause of many of the anomalous behavior exhibited by Georgia’s voting 
system. As examining the GEMS database requires little technical expertise, does 
not require stringent security procedures, and the database can be easily produced 
by the defendants, its examination is the most efficient way to proceed in a forensic 
investigation of Georgia’s voting system and will provide a good basis for future 
forensic investigations requiring expertise of computer scientists. 
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GEMS DATABASE REPORTS 

18. Some of the data contained within the GEMS database is also present 
in the reports generated by the GEMS software. Examples of the specific reports 
that the state has offered are shown in Exhibits TK, and include: 

• Base Precincts with Race Report: an accounting of which races 
appeared on the ballot in each precinct; 

• Vote Center with Cards Report: an accounting of which memory cards 
and ballot styles were present in each precinct; 

• Statement of Votes Cast Report: Election results by precinct for every 
candidate on the ballot in each precinct; 

• Summary Report: summarized election result including breakdowns 
by type of ballot cast (early voting, absentee by mail, and so on); 

• Ballot Image Report: a text representation of every ballot recorded by 
the voting system during the election (one report for every ballot cast, i.e. millions 
of pages of data from just the November 2018 election alone). 

19. These reports fail to provide crucial information contained in the 
GEMS database. Due to the potential vulnerabilities discussed above, and the fact 
that these reports are generated by the GEMS database itself, it is entirely possible 
that errors which reside in the database would not be appear in these reports. For 
example, if a field in the database incidentally triggers a buffer overflow, this error 
may not appear in the written report. 

20. These reports also do not contain all of the data in the GEMS database 
that is germane to an inquiry about configuration errors or malware. For example, 
nothing in the reports would show a miscoding of a candidate’s name. Vote totals 
which were erroneously counted for Candidate A due to a misconfiguration, for 
example, would also appear that way in the reports. Essentially, the reports do not 
create an independent evidentiary trail with which to assess the correctness of the 
GEMS database, because they (a) do not contain all of the data in the database and 
(b) will not exhibit errors in a detectable way. 

21. Not only do these reports not constitute a faithful recreation of the 
GEMS database, but they create a significant burden on the investigation. The 
database is fully searchable and can be examined using standard database tools. 
GEMS reports are PDFs, which would preclude the usage of tools that could 
facilitate easy comparison and validation of entries. Examining and testing 
tabulations on millions of pages of ballots image reports alone would take far more 
time than a full forensic investigation of the entire GEMS server. 
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22. I understand that the State Defendants contends that the integrity of 
the GEMS Database, and other aspects of Georgia’s system, is confirmed by using 
what is called “hash” comparisons between the suspect program and a known 
uncompromised version. The only thing such hash comparisons can establish is 
whether or not two copies of a file are identical. The kinds of errors that Plaintiffs 
seek to investigate by reviewing the GEMS database are likely to occur in all 
copies of a particular database file. Therefore, hash comparisons can in no way 
substitute for a detailed review of the database contents. 
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CounterGroup 


6/26/2019 


Keyld 

Label 

ShortLabel 

SortSeq 

VGrouplId 

VGroup2ld 

0 

Polling 

POLL 

10 

0 

0 

1 

Early 

EARLY 

20 

0 

0 

2 

Provisional 

PROV 

30 

0 

0 


Page 1 
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CounterGroup 


6/26/2019 


PerCards 

Exportld 

UseArtworkPctl 

UseArtworkCGr 

100 


1 

0 

100 


1 

0 

100 


1 

0 


Page 2 
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Candidate 


6/26/2019 


Keyld 

Label 

SortSeq 

CandidateType 

Exportld 

9 

KIRKPATRICK, A 

10 

0 


10 

CARMONA, RIC 

10 

0 


35 

CAJERO BEDFO 

10 

0 


41 

PANCRAZI, LYN 

10 

0 


47 

FARLEY, STEVE 

10 

0 


53 

BRADLEY, DAVI 

10 

0 


67 

FLEMING, PAT 

10 

0 


90 

DALESSANDRO, 

10 

0 


91 

GABALDON, R 

20 

0 


150 

LEACH, ROBER 

10 

0 


151 

STONEBRAKER, 

20 

0 


179 

BARBER, RON 

10 

0 


188 

GRIJALVA, RAU 

10 

0 


195 

LOPEZ, LINDA 

10 

0 


203 

HOLT, JO 

10 

0 


210 

GONZALES, SAL 

10 

0 


211 

SALDATE, MAC 

20 

0 


220 

SIDHWA, MOH 

10 

0 


221 

STEELE, VICTO 

20 

0 


224 

MACH, STEFAN 

10 

0 


226 

WHEELER, BRU 

20 

0 


233 

JOSEPH, DAVE 

10 

0 


244 

BUSCHING, MA 

10 

0 


245 

KENNEDY, SAN 

20 

0 


246 

NEWMAN, PAU 

30 

0 


256 

YOUNG WRIGH 

10 

0 


265 

VALADEZ, RAM 

10 

0 


271 

BRONSON, SHA 

10 

0 


283 

ELIAS, RICHAR 

10 

0 


289 

LAWALL, BARB 

10 

0 


295 

DUPNIK, CLARE 

10 

0 


306 

RODRIGUEZ, F. 

10 

0 


312 

RICHARDSON, 

10 

0 


318 

STAPLES, BILL 

10 

0 


328 

CASTILLO JR., J 

10 

0 


329 

Write-in 20 

20 

1 


333 

DOLNY, CARME 

10 

0 


334 

Write-in 20 

20 

1 


338 

SIMON, PAUL 

10 

0 


339 

Write-in 20 

20 

1 


343 

FELIX, MARIA L. 

10 

0 


344 

Write-in 20 

20 

1 



Page 1 



Case l:17-cv-02989-AT Document 441 Filed 07/01/19 Page 206 of 443 


Candidate 


6/26/2019 


Keyld 

Label 

SortSeq 

CandidateType 

Exportld 

353 

RADEMAKER, J 

10 

0 


359 

DRISCOLL, JIM 

10 

0 


365 

BERNAL, BENN 

10 

0 


375 

DORGAN, MAR 

10 

0 


376 

Write-in 20 

20 

1 


380 

PHILIP, CO LETT 

10 

0 


447 

Write-in 20 

20 

1 


452 

YES 

10 

0 


453 

NO 

20 

0 


454 

YES 

10 

0 


455 

NO 

20 

0 


456 

YES 

10 

0 


457 

NO 

20 

0 


458 

YES 

10 

0 


459 

NO 

20 

0 


460 

YES 

10 

0 


461 

NO 

20 

0 


462 

FLAKE, JEFF 

20 

0 


464 

PATON, JONAT 

20 

0 


466 

MCSALLY, MAR 

20 

0 


468 

SAUCEDO MER 

20 

0 


469 

GUERRA, BLAN 

30 

0 


470 

Write-in 40 

40 

1 


471 

Write-in 30 

30 

1 


473 

MOTT, TYLER 

20 

0 


474 

Write-in 30 

30 

1 


475 

ANTENORI, FRA 

20 

0 


476 

Write-in 30 

30 

1 


477 

MELVIN, AL 

20 

0 


478 

Write-in 30 

30 

1 


479 

GRIFFIN, GAIL 

20 

0 


480 

Write-in 30 

30 

1 


481 

ACKERLEY, JOH 

30 

0 


482 

Write-in 40 

40 

1 


483 

Write-in 30 

30 

1 


485 

ORR, ETHAN 

30 

0 


486 

Write-in 40 

40 

1 


488 

Write-in 40 

40 

1 


489 

Write-in 50 

50 

1 


490 

CLODFELTER, T 

30 

0 


491 

VOGT, TED 

40 

0 


492 

Write-in 50 

50 

1 
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Candidate 


6/26/2019 


Keyld 

Label 

SortSeq 

CandidateType 

Exportld 

493 

Write-in 60 

60 

1 


494 

KWASMAN, AD 

20 

0 


495 

SMITH, STEVE 

30 

0 


496 

Write-in 40 

40 

1 


497 

Write-in 50 

50 

1 


498 

GOWAN, DAVI 

30 

0 


499 

STEVENS, DAVI 

40 

0 


500 

Write-in 50 

50 

1 


501 

Write-in 60 

60 

1 


503 

YES 

10 

0 


504 

NO 

20 

0 


505 

YES 

10 

0 


506 

NO 

20 

0 


509 

YES 

10 

0 


510 

NO 

20 

0 


513 

YES 

10 

0 


514 

NO 

20 

0 


515 

YES 

10 

0 


516 

NO 

20 

0 


517 

YES 

10 

0 


518 

NO 

20 

0 


519 

BITTER SMITH, 

40 

0 


520 

BURNS, ROBER 

50 

0 


521 

STUMP, BOB 

60 

0 


525 

MILLER, ALLY 

20 

0 


526 

Write-in 30 

30 

1 


527 

KELLEY, JAMES 

20 

0 


528 

Write-in 30 

30 

1 


529 

BELL, TANNER 

20 

0 


530 

Write-in 30 

30 

1 


531 

CARROLL, RAY 

10 

0 


532 

Write-in 20 

20 

1 


533 

GONZALES, FER 

20 

0 


534 

Write-in 30 

30 

1 


535 

Write-in 20 

20 

1 


536 

NAPIER, MARK 

20 

0 


537 

CROTEAU, DAV 

30 

0 


538 

Write-in 40 

40 

1 


539 

BEARD, BILL 

20 

0 


540 

Write-in 30 

30 

1 


541 

FORD, BETH 

20 

0 


542 

Write-in 30 

30 

1 
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Candidate 


6/26/2019 


Keyld 

Label 

SortSeq 

CandidateType 

Exportld 

543 

Write-in 20 

20 

1 


544 

ARZOUMANIA 

10 

0 


545 

Write-in 20 

20 

1 


546 

PEYTON, JACK 

10 

0 


547 

Write-in 20 

20 

1 


548 

LESTER, DAVID 

20 

0 


549 

Write-in 30 

30 

1 


550 

Write-in 20 

20 

1 


551 

BROWN, R. C. 

10 

0 


552 

ROBERTS, VINC 

10 

0 


553 

YES 

10 

0 


554 

NO 

20 

0 


555 

YES 

10 

0 


556 

NO 

20 

0 


557 

WHITEHOUSE, 

10 

0 


558 

Write-in 20 

20 

1 


559 

GALVIN, SAND 

10 

0 


560 

HOWELL, BRUC 

20 

0 


561 

SHILLING, MIKE 

30 

0 


562 

ST. JOHN, VALE 

40 

0 


563 

Write-in 50 

50 

1 


564 

Write-in 60 

60 

1 


565 

Write-in 70 

70 

1 


566 

Write-in 30 

30 

1 


567 

Dl NOTO, FRED 

20 

0 


568 

HANSEN, DENN 

30 

0 


569 

HEIDINGER, DO 

40 

0 


570 

SARGENT, JEFF 

50 

0 


571 

TREECE, MICH 

60 

0 


575 

LANNON, ALBE 

10 

0 


576 

MCCOOL, PEG 

20 

0 


577 

ROBLES, ERNIE 

30 

0 


578 

SEESE, DAVID S 

40 

0 


579 

Write-in 50 

50 

1 


580 

Write-in 60 

60 

1 


581 

Write-in 70 

70 

1 


582 

BERRY, ANTHO 

10 

0 


583 

CARDILLO, RIC 

20 

0 


584 

IZZO, RON 

30 

0 


585 

RINALDI, JENNI 

40 

0 


586 

RUPPEL, DOUG 

50 

0 


587 

Write-in 60 

60 

1 



Page 4 



Case l:17-cv-02989-AT Document 441 Filed 07/01/19 Page 209 of 443 


Candidate 


6/26/2019 


Keyld 

Label 

SortSeq 

CandidateType 

Exportld 

588 

Write-in 70 

70 

1 


589 

Write-in 80 

80 

1 


590 

BALL-CUMMIN 

10 

0 


591 

CHUMNEY, JOA 

20 

0 


592 

GUISE, ALECIAJ 

30 

0 


593 

KENDRICK, GAR 

40 

0 


594 

SNIFFEN, MICH 

50 

0 


595 

Write-in 60 

60 

1 


596 

Write-in 70 

70 

1 


597 

BOTEILHO, LOR 

10 

0 


606 

Write-in 10 

10 

1 


607 

Write-in 20 

20 

1 


608 

Write-in 30 

30 

1 


610 

CANTON, ANT 

20 

0 


611 

GUNDERSON, L 

30 

0 


612 

HEDDEN, ROBE 

40 

0 


613 

MURPHY, LEO 

50 

0 


614 

Write-in 60 

60 

1 


615 

Write-in 70 

70 

1 


616 

Write-in 80 

80 

1 


617 

Write-in 90 

90 

1 


618 

BAKARI, MENE 

10 

0 


619 

CAMPOS-FLEE 

20 

0 


620 

COTTON, DON 

30 

0 


621 

CUEVAS, MIGU 

40 

0 


622 

ELLINWOOD, R 

50 

0 


623 

FOSTER, KRISTE 

60 

0 


624 

HUNNICUTT, J 

70 

0 


625 

JUAREZ, CAM S 

80 

0 


626 

MEDLER, ROBE 

90 

0 


627 

PUTNAM-HIDA 

100 

0 


628 

STEGEMAN, M 

110 

0 


629 

SUGIYAMA, AL 

120 

0 


630 

Write-in 130 

130 

1 


631 

Write-in 140 

140 

1 


632 

Write-in 150 

150 

1 


633 

CONDRA, ROG 

10 

0 


634 

HOPKINS, SUZA 

20 

0 


635 

LOPEZ, MARIBE 

30 

0 


636 

POST, DAN 

40 

0 


637 

Write-in 50 

50 

1 


638 

Write-in 60 

60 

1 
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Candidate 


6/26/2019 


Keyld 

Label 

SortSeq 

CandidateType 

Exportld 

639 

Write-in 70 

70 

1 


640 

CROUCH, BUCK 

10 

0 


641 

GARCIA, BOBB 

20 

0 


642 

GONZALES, LO 

30 

0 


643 

PAVEY, MALCO 

40 

0 


644 

Write-in 50 

50 

1 


645 

Write-in 60 

60 

1 


646 

Write-in 70 

70 

1 


647 

BURKHOLDER, 

10 

0 


648 

COULTER, JIM 

20 

0 


649 

KING, DEBBIE K 

30 

0 


650 

KMAK, ANGELA 

40 

0 


651 

STAGGS, DANA 

50 

0 


652 

Write-in 60 

60 

1 


653 

Write-in 70 

70 

1 


654 

Write-in 80 

80 

1 


655 

BERTSCH, NUBI 

10 

0 


656 

HALL, J. ELAINE 

20 

0 


657 

HAM, KRISTEN 

30 

0 


658 

KELLERMEYER, 

40 

0 


659 

Write-in 50 

50 

1 


660 

Write-in 60 

60 

1 


661 

Write-in 70 

70 

1 


662 

YES 

10 

0 


663 

NO 

20 

0 


664 

YES 

10 

0 


665 

NO 

20 

0 


666 

YES 

10 

0 


667 

NO 

20 

0 


668 

YES 

10 

0 


669 

NO 

20 

0 


670 

YES 

10 

0 


671 

NO 

20 

0 


672 

OBAMA 

10 

0 


674 

ROMNEY 

20 

0 


675 

JOHNSON 

30 

0 


676 

STEIN 

40 

0 


677 

BAKER, BERYL 

20 

0 


678 

Write-in 30 

30 

1 


679 

Write-in 20 

20 

1 


680 

Write-in 20 

20 

1 


681 

Write-in 20 

20 

1 
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Candidate 


6/26/2019 


Keyld 

Label 

SortSeq 

CandidateType 

Exportld 

682 

ESCAMILLA, JU 

10 

0 


683 

OTONDO, LISA 

20 

0 


684 

Write-in 30 

30 

1 


685 

Write-in 40 

40 

1 


686 

Write-in 50 

50 

1 


687 

YES 

10 

0 


688 

NO 

20 

0 


689 

YES 

10 

0 


690 

NO 

20 

0 


691 

YES 

10 

0 


692 

NO 

20 

0 


693 

YES 

10 

0 


694 

NO 

20 

0 


695 

YES 

10 

0 


696 

NO 

20 

0 


697 

YES 

10 

0 


698 

NO 

20 

0 


699 

YES 

10 

0 


700 

NO 

20 

0 


701 

YES 

10 

0 


702 

NO 

20 

0 


703 

YES 

10 

0 


704 

NO 

20 

0 


705 

YES 

10 

0 


706 

NO 

20 

0 


710 

LEE, SYLVIA 

10 

0 


711 

MARSHALL, SH 

20 

0 


712 

Write-in 30 

30 

1 


713 

CORTEZ, MART 

10 

0 


714 

FRIDENA, RICH 

20 

0 


715 

SAITTA, FRANCI 

30 

0 


716 

Write-in 40 

40 

1 


719 

YES 

10 

0 


720 

NO 

20 

0 


721 

YES 

10 

0 


722 

NO 

20 

0 


723 

Write-in 20 

20 

1 


724 

Write-in 20 

20 

1 


725 

VICTOR, MARC 

30 

0 


726 

Write-in 40 

40 

1 


727 

ALLEN, KIM 

30 

0 


728 

Write-in 40 

40 

1 
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Candidate 


6/26/2019 


Keyld 

Label 

SortSeq 

CandidateType 

Exportld 

729 

GOHL, CHRIST 

70 

0 


730 

MEADOWS, TH 

80 

0 


731 

POUT, DANIEL 

90 

0 


732 

Write-in 100 

100 

1 


733 

Write-in 110 

110 

1 


734 

Write-in 120 

120 

1 


735 

YES 

10 

0 


736 

NO 

20 

0 


737 

YES 

10 

0 


738 

NO 

20 

0 


739 

YES 

10 

0 


740 

NO 

20 

0 


741 

YES 

10 

0 


742 

NO 

20 

0 


743 

YES 

10 

0 


744 

NO 

20 

0 


745 

YES 

10 

0 


746 

NO 

20 

0 


747 

Write-in 50 

50 

1 


748 

ARCHULETA, P 

10 

0 


749 

Write-in 70 

70 

1 


750 

Write-in 80 

80 

1 


751 

Write-in 90 

90 

1 
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CandidateCounter 


6/26/2019 


Counter Batchld 

Reportunitld 

CounterGroupIc CandVGroupId 

TotalVotes 

590 

4 

0 

10 

180 

590 

4 

0 

41 

240 

590 

4 

0 

188 

187 

590 

4 

0 

244 

157 

590 

4 

0 

245 

164 

590 

4 

0 

246 

160 

590 

4 

0 

271 

224 

590 

4 

0 

289 

255 

590 

4 

0 

295 

190 

590 

4 

0 

306 

221 

590 

4 

0 

312 

179 

590 

4 

0 

318 

250 

590 

4 

0 

462 

170 

590 

4 

0 

468 

161 

590 

4 

0 

469 

18 

590 

4 

0 

503 

193 

590 

4 

0 

504 

74 

590 

4 

0 

505 

191 

590 

4 

0 

506 

75 

590 

4 

0 

509 

189 

590 

4 

0 

510 

75 

590 

4 

0 

513 

192 

590 

4 

0 

514 

68 

590 

4 

0 

515 

189 

590 

4 

0 

516 

73 

590 

4 

0 

517 

191 

590 

4 

0 

518 

68 

590 

4 

0 

519 

131 

590 

4 

0 

520 

143 

590 

4 

0 

521 

133 

590 

4 

0 

529 

141 

590 

4 

0 

535 

4 

590 

4 

0 

536 

157 

590 

4 

0 

537 

19 

590 

4 

0 

539 

136 

590 

4 

0 

541 

184 

590 

4 

0 

543 

5 

590 

4 

0 

544 

249 

590 

4 

0 

545 

4 

590 

4 

0 

553 

110 

590 

4 

0 

554 

214 

590 

4 

0 

555 

112 
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Language 


6/26/2019 


Keyld 

SortSeq Label 

Exportld 

Localeld 

CountMethodM 

0 

0 English/Spanish 


1033 

1 

1 

10 English TS 


1033 

2 

2 

20 Spanish TS 


1034 

2 


Page 1 


Case l:17-cv-02989-AT Document 441 Filed 07/01/19 Page 215 of 443 


E 

X 

H 

I 

B 

I 

T 

D 


Case l:17-cv-02989-AT Document 441 Filed 07/01/19 Page 216 of 443 


IN THE UNITED STATES DISTRICT COURT 
FOR THE NORTHERN DISTRICT OF GEORGIA 
ATLANTA DIVISION 


DONNA CURLING, et al., 

Civil Action No. 
l:17-cv-02989-AT 

BRAD RAFFENSPERGER, et al., 

Defendants. 


Plaintiffs, 

v. 


DECLARATION OF THOMAS W. RYAN 

Pursuant to 28 U.S.C. § 1746,1, Thomas W. Ryan, hereby declare as follows: 

1. I have personal knowledge of the matters stated herein and would testify to 
the same if called as a witness in Court. 

2. I am over the age of 21 and am otherwise competent to testify. 

3. I have a Ph.D. in Electrical and Computer Engineering from the University 
of Arizona, awarded in 1980. 

4. I was employed by Science Applications International Corporation (SAIC) 
from 1980 to 2007. My work there involved digital image processing. I was 
an algorithm designer, senior scientist, and project manager. 


1 
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5. I have over 25 years of professional experience in the design, 
development, integration, and delivery of software systems. Some of my 
work involved security clearances so I am familiar with the nature of files 
that should have restricted access and those that should be visible to the 
public and stakeholders. 

6. I have worked on public oversight of elections and election integrity issues 
since early 2003 when I co-authored a report on the Pima County election 
system. 

7. Iam familiar with the federal Voting System Standards that include 
the design and testing requirements for systems certified in the state of 
Arizona. 

8. In 20041 started Arizona Citizens for Fair Elections to promote better 
election practices. 

9. From 2008 to 2018,1 served as a member of the Pima County Election 
Integrity Commission, including four years as Chair of the Commission. 

10. In 2005 and 2006 I was involved in developing election audit legislation 
that requires a sample hand count as a check against our computerized 
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voting system which is primarily a hand marked paper ballot system. This 
legislation was enacted by the Arizona legislature. 

11. Pima County used the Diebold/GEMS voting system for a number of years 
before modernizing the voting system in 2016 and switching to a different 
system. The primary voting method was hand marked paper ballots counted 
by the Accu-vote optical scanning equipment with Diebold DREs used in the 
polling place for accessibility options. 

12. My focus on election auditing derives from the fact that computerized voting 
systems are not transparent — it is difficult, if not impossible, to see how the 
systems are interpreting ballots and aggregating results. As with electronic 
financial transactions, it is important that election voting be transparent and 
subjected to auditing and public oversight to be sure the systems are working 
properly. 

13. The Diebold/GEMS system is particularly vulnerable to malicious data 
manipulation because the election database can be edited with the aid of 
commonly available software. Editing the database in this way leaves no 
traces in the election system activity logs. 

14. Detection of data manipulation would require analysis of the election 
database to look for inconsistencies. Standard reports generated by the 
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GEMS system would rarely detect such manipulation or configuration 
errors. 

15. The election database contains information about all the contests appearing 
on the ballot as well as tables that show the choices made by voters on 
individual anonymous ballots, referred to as cast vote records. 

16. There is no information in the database that reveals any voter’s identity or 
personal information. 

17. Under court order, the GEMS databases were available for public inspection 
in Pima County from 2008 until the system was replaced in 2016. During 
that time, I am aware of no problems arising from the availability of the 
databases. Inspection of these databases showed that the reported election 
results were consistent with the data contained in the databases. 

18. Minor irregularities were discovered in early available databases, including 
multiple uploads of precinct-tabulated ballot data, and cases where one or 
two individual ballots had been removed and later replaced. None of these 
irregularities affected reported election outcomes. No irregularities have 
been discovered in later databases. 

19. Pima County replaced the Diebold/GEMS system in 2016 with a system 
from Election Systems and Software (ES&S). The databases from this 
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system are encrypted, but the Pima County Elections Department continues 
to export the critical portions of the database, including the cast vote records, 
for public inspection. No problems have results from the public availability 
of this data. 

I declare under penalty of perjury that the foregoing is true and correct. 

Executed this 30th day of June, 2019, in Boulder, Colorado. 



Thomas W. Ryan 
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v. ) 
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TERESA LYNN LEDFORD 
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UNITED STATES DISTRICT COURT 
FOR THE NORTHERN DISTRICT OF GEORGIA 


ATLANTA 

DONNA CURLING, et al. , 
Plaintiffs, 

vs . 

BRAD RAFFENSPERGER, et al. , 
Defendants. 


DIVISION 


) 

) 

) 

) CIVIL FILE ACTION 

) 

) NO. 1:17-cv-02989-AT 

) 

) 

) 

) 


DEPOSITION OF 
TERESA LYNN LEDFORD 
June 24, 2019 
9:40 a.m. 

Gwinnett Justice and Administration Center 

75 Langley Drive 
Lawrenceville, Georgia 

Marsi Koehl, CCR-B-2424 
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of Perjury/Oatis 
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169 
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Official Election Bulletin 188 
January 30, 2019 


Ballot Image Report 189 


(Original exhibits attached to original transcript.) 
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APPEARANCES OF COUNSEL 

On behalf of the Plaintiffs: 

JOHN POWERS 
Attorney at Law 

LAWYERS' COMMITTEE FOR CIVIL RIGHTS UNDER LAW 
1500 K Street NW 
Suite 900 

Washington, D.C. 20005 
(202) 662-8600 

jpowers@lawyerscommittee.org 

On behalf of the Defendants: 

BRYAN P. TYSON 
Attorney at Law 
TAYLOR ENGLISH DUMA, LLP 
1600 Parkwood Circle 
Suite 200 

Atlanta, Georgia 30339 
(678) 336-7249 
btyson@taylorenglish.com 

CHERYL RINGER 

Attorney at Law 

OFFICE OF THE COUNTY ATTORNEY 

FULTON COUNTY 

141 Prior Street, SW 

Suite 4038 

Atlanta, Georgia 30303 
(404) 612-0246 

cheryl.ringer@fultoncountyga.gov 

On behalf of the Witness: 

VAN STEPHENS 
Attorney at Law 

GWINNETT COUNTY LAW DEPARTMENT 
75 Langley Drive 
Lawrenceville, Georgia 30046 
(770) 822-8702 

van.stephensQgwinnettcounty.com 
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APPEARANCES CONTINUED 

Appearing telephonically: 

MARCIE BRIMER 

Attorney at Law 

MORRISON FOERSTER 

2000 Pennsylvania Avenue, NW 

Suite 6000 

Washington, D.C. 20006-1888 
(202) 887-6932 

mbrimerQmofo.com 


Also present: 

Marilyn Marks, Coalition for Good Governance 


(Pursuant to OGCA 15-14-37 (a) and (b) a 

written disclosure statement was submitted by the 
court reporter and is attached hereto.) 
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PROCEEDINGS 
(Plaintiff's Exhibit 1 was marked for 
identification.) 

TERESA LYNN LEDFORD, 

having been first duly sworn, was examined and 
testified as follows: 

EXAMINATION 


BY MR. POWERS: 


Q. Good morning, Ms. Ledford. 

A. Good morning. 

Q. I introduced myself before. My name is John 
Powers and I'm an attorney with the Lawyers' 

Committee for Civil Rights Under Law and one of the 
counsels representing the plaintiffs in this case. 

Could you please state and spell your full 
name for the record. 

A. It's Teresa Lynn Ledford. T-E-R-E-S-A. 
L-Y-N-N. L-E-D-F-O-R-D. 


Q. Thank you. 

Ms. Ledford, have you ever been deposed 

before? 


A. No. 

Q. Have you ever offered sworn testimony in any 
other capacity? 

A. Yes. 
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MR. STEPHENS: As an affidavit. 

THE WITNESS: Yes. Through the 
affidavit process, yes. 

BY MR. POWERS: 


Q. In probably several cases? 

A. Correct. 

Q. Probably too many to go through right now. 

A. Yeah, I couldn't tell you. 

Q. Since this is your first deposition, I'll go 
through a few of the ground rules. 

First, do you understand that you're 


testifying under oath just the same as if 
court of law? 

A. Yes. 

Q. If you don't understand one of my questions 
please let me know and I'11 try to rephrase it so 
that you can understand. Is that okay? 

A. Yes. 

Q. And for the sake of the court reporter, 
who's working hard today, if you could please wait 
until I finish asking my question before you begin 
answering it. 

A. Yes. 


you re r 


a 


Q. All right. And, lastly, you should please 
feel free to take a break at any time just so long 
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it's not while a question is pending. Is that okay? 

A. Yes. 

Q. All right. Do you have an official E-mail 
address ? 

A. Yes. It's lynn.ledford@gwinnettcounty.com. 

Q. Ms. Ledford, what did you do to prepare for 
your deposition today? 

A. Gather the information requested in the 
subpoena. 

Q. Great. And have you brought any of the 
documents requested in plaintiff's subpoena with you 
today? 

A. Yes. I have. 

(Plaintiff's Exhibit 2 was marked for 

identification.) 

BY MR. POWERS: 

Q. Before we go further, I'll go ahead and hand 
you what I've marked for identification as 
Plaintiff's Exhibit 2. 

Ms. Ledford, is Plaintiff's Exhibit 2 the 
subpoena that you were referring to from the 
Coalition for Good Governance? 

A. Yes. 

Q. Ms. Ledford, what documents have you brought 
with you today in response to plaintiff's subpoena, 
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Plaintiff's Exhibit No. 2? 

A. This is the number of provisional ballots 
partially counted, fully counted and rejected. 

MR. POWERS: And I'm going to go — and 
maybe we can go through them one at a time. 

MR. STEPHENS: In order, mm-hmm. 

(Plaintiff's Exhibit 3 was marked for 
identification.) 

BY MR. POWERS: 

Q. So, Ms. Ledford, you handed what I've now 
marked as Plaintiff's Exhibit 3. 

And could you please tell me what 
Plaintiff's Exhibit No. 3 is? 

A. It is the summary of provisional ballots. 

MR. STEPHENS: I believe that's in 
response to No. 15. 

MR. POWERS: Great. 

THE WITNESS: This is comments from 
voters regarding the voting equipment. 

MR. POWERS: Okay. And I'm marking that 
document as Plaintiff's Exhibit No. 4. 

THE WITNESS: Yes. 

(Plaintiff's Exhibit 4 was marked for 
identification.) 

MR. STEPHENS: Let's try to identify 
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which one of the items that is. 

BY MR. POWERS: 

Q. Ms. Ledford, can you please identify which 
subpoena question this — 

A. Number 11. 

MR. STEPHENS: Eleven, okay? 

BY MR. POWERS: 

Q. So Plaintiff's Exhibit No. 4 was produced in 
response to — 

A. — No. 11. 

Q. — request No. 11 of plaintiff's subpoena. 
Thank you. 

A. This is the intergovernmental agreement 
between Gwinnett County Board of Voter Registration 
Elections and the cities for 2017 and 2019. And that 
is No. 16 on the subpoena. 

(Plaintiff's Exhibit 5 was marked for 

identification.) 

BY MR. POWERS: 

Q. I'm going to go ahead and mark that for 
identification Plaintiff's Exhibit No. 5. 

Just to reiterate, Plaintiff's Exhibit No. 5 
is in response to what request number from 
plaintiff's subpoena? 

A. Sixteen. 
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Q. Thank you. 

A. I'm looking for the number on this one. 

Okay. This is No. 17. This is 
communications and documents regarding the procedure 
for electronic transmission and receipt of 
election-rated files. 

MR. POWERS: I'm going to go ahead and 
mark this document as Plaintiff's Exhibit 
No . 6 . 

(Plaintiff's Exhibit 6 was marked for 
identification.) 

BY MR. POWERS: 

Q. And just to reiterate, you said that is in 
response to subpoena request No. 17? 

A. Correct. 

Q. What's next ? 

A. This actually goes with that as well. I'm 
sorry. There's three pages to that, three sets to 
that one. 

Q. So let's add that into Plaintiff's Exhibit 
No. 6 . 

A. This is No. 8. This is bulletins regarding 
electronic updates about security on the GEMS 
servers. 

MR. POWERS: I'm going to mark this 
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document as Plaintiff's Exhibit No. 7. 

(Plaintiff's Exhibit 7 was marked for 
identification.) 

BY MR. POWERS: 

Q. And just to reiterate, you said Plaintiff's 
Exhibit No. 7 was produced in response to plaintiff's 
subpoena request No. 8? 

A. Correct. That's all I have. 

Q. Okay. And I understand there are some 
documents — strike that. 

Are there any documents that you have 
identified that you are not producing today? 

A. Yes. 

Q. What documents are those? 

MR. STEPHENS: Let me — let's just go 
through this — in fact, if we can go 
through the request for production of 
documents. 

MR. POWERS: Sure. 

MR. TYSON: That might work and then we 
can state the objections and go from there. 

MR. POWERS: Okay. 

MR. STEPHENS: All right. As to request 
No. 1, I think the State had an objection to 
that. 
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MR. TYSON: Yes. So the State 
defendants object to request No. 1 as 
outlined in our letter yesterday evening. 

The GEMS database is a state-owned system 
and it's protected from disclosure by state 
law and has already been the subject of some 
back and forth between parties regarding its 
disclosure. 

We'll been talking with Judge Totenberg 
about that disclosure later in the week. 

But it is our contention that this is 


protected from disclosure 

by stat 

e law 

because it could 

L be used 

to inject malware 

or other software into 

the system 

that 


could affect — adversely affect election 
security. 

So State defendants object to any 
disclosure of the GEMS database under 
request No. 1. 

MR. STEPHENS: And as to Ms. Ledford, 
she also objects and shares in that — joins 
in that objection. 

We also prior to the deposition today 
handed you our written objection to Item 
No. 1 as well as a few others. 
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Item 1 requests the GEMS database. And 
that — once the election — and it's the 
database for the November 2018 election. 

Once that election is completed, the 
GEMS database is delivered to the clerk of 
the superior court and it remains in the 
clerk's possession for a couple of years 
under seal and can only be released through 
a court order. It is then given to the 
grand jury to take a look at it and maybe 
it's disposed of it at that point. 

It contains privileged and prot 
information. And production would 
effect of rendering the State's ele 
system insecure and vulnerable to attack. 

It would also jeopardize the security of our 
present election system. 

And we've given you citations to a case 
in which this issue was discussed and a 
citation to 21-2-500 on that point. 

MR. POWERS: Are there any other 
objections you want to state for the 
record or can we move on? 

MR. STEPHENS: Let's go through these. 

Request No. 2, there are no documents 


ected 
have the 
ctoral 
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that Ms. Ledford has identified that are 
responsive to this request. We did oppose 
the objection that is contained in the 
letter, but there are no documents by the 
same token. 

No. 3, policies, procedures, manuals and 
other documents relating to or describing 
the assignment of unique identifiers to 
electronic ballot image reports or cast vote 
records. There are no documents responsive 
to that request. As a matter of fact, I 
understand that the Elections Division does 
not do that. Is that correct, Lynn? 

THE WITNESS: Correct. 

MR. STEPHENS: In paragraph four, it's 

requesting policies, procedures, manuals 
relating to or describing the method of 
retrieval of electronic ballot information 
from specific cast electronic ballots for 
purposes of research or canceling the 
ballots or votes. 

There are no documents responsive to 
that request. And, again, my understanding 
is that the Elections Division does not do 
that. Is that correct? 
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THE WITNESS: Correct. 

MR. STEPHENS: Okay. Paragraph five, 
you've asked for ballot image reports for 
cast vote records of the first five ballots 
cast and the last five ballots cast in the 
November 6, 2018, election at Martins E 
Precinct. 

There are no documents that are 
responsive to this request. And I 
understand that it would be impossible for 
us to retrieve that. Is that correct? 


1 

rHE WITNESS: 


That' 

s 

correct. 




I 

4R. STEPHENS 

• 

And 

would you 

describe 

why t 

:hat's not po 

ssible? 






THE WITNESS: Yes. In order to keep the 
anonymity of the voter and the integrity of 
the system, once a ballot is cast, it then 
becomes randomized throughout the unit, so 
you couldn't take a numbered list of voters 
and know that the first five people, this is 
the first five ballots, so you would be able 
to see how those voters cast their ballots. 
So we don't have the option of getting this 
information. 

MR. STEPHENS: Would the same hold true 
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of No. 6? 

THE WITNESS: Correct. 

MR. STEPHENS: It's just a different 
precinct. 

THE WITNESS: Correct. 

MR. STEPHENS: And we have objected to 
five and six as seen in the letter, but 
there are no documents responsive to that 
request. 

Then let me make sure I'm going through 
and checking these. 

On 7, nondisclosure agreement signed by 
the Gwinnett election officials related to 
election data contained in the County's GEMS 
database. There are no documents responsive 
to this one and I understand we don't have 
any such agreements. Is that correct? 

THE WITNESS: Correct. 

MR. STEPHENS: We've already talked 
about eight and produced documents. 

Let's see. No. 9, instructions, 
bulletins and electronic updates, receipt 
from the Secretary of State's Office related 
to security threats to the voting system or 
election-related equipment since January 1st 
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of 2016. 

THE WITNESS: We had those. 

MR. STEPHENS: Okay. There's — oh, 
that's right. That's — 

MR. TYSON: — included in Exhibit 7, I 
believe, updates regarding the DRE system 
and regarding the voting system at large. 

Does that sound right? 

THE WITNESS: Mm-hmm. 

MR. STEPHENS: I guess we have produced 
those. So we're on 10, I think, right now. 

MR. POWERS: Yeah. 

MR. STEPHENS: And that dealt with 
documents related to preventing voters who 
appear at the wrong polling place in some 
elections from being located in an express 
poll book and redirected by poll workers to 
a second incorrect polling place. 

There are no documents responsive to 
this request and that's not a practice of 
ours. Is it? 

THE WITNESS: Correct. 

MR. STEPHENS: We've produced documents 
responsive to 11. 

Twelve involves investigations 
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concerning the undervote in the lieutenant 
governor's race in the November 2018 
elections. There were no documents 
responsive to that request. Is that right? 

THE WITNESS: Correct. 

MR. STEPHENS: And then I think we just 
have 13 and 14 that we have not responded to 
with documents. 

Thirteen is complaints received from 
voters, poll workers or Gwinnett County 
staff regarding inaccuracies in voter 
information in the electronic poll books 
during the November elections. 

Were there any documents responsive to 
that ? 

THE WITNESS: No. 

MR. STEPHENS: And the last one is the 
one that we've also objected to, which is 
the records concerning or related to changes 
made to the voter registration information 
or the electronic poll book information for 
Gwinnett county voters Dana Bowers and 
Jasmine Clark since January 1st, 2018. 

Both the State and we have objected to 
that and I'll let the State make its 
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objection. 

MR. TYSON: And the objection there is 
the records related to the voter 
registration information from the ENet 
database include nonpublic information that 
is protected from disclosure about the 
individual voters. 

We have no objection to the production 
pursuant to a protective order when one is 
entered, but there has not yet been a 
protective order entered in the case. 

And so until such time as that 
protective order is entered, the State would 
object to disclosure of the audit records 
and nonpublic information from the ENet 
database regarding those voters. 

MR. STEPHENS: We concur in that 
objection. 

And I will say with regard to the 
objection, in No. 1 dealing with the GEMS 
database, that we will, of course, comply 
with any court order that's entered. That 
information is by Georgia law stored 
securely pending a court order. And if a 
court order is entered with protective 
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provisions, then, of course, we'll comply 
with that. 

MR. POWERS: Okay. 

MR. STEPHENS: And I believe that covers 
all the request for production. 

MR. POWERS: I think — what about 15, 

16 and 17? 

MR. STEPHENS: Let's see. I had that we 
produced documents under 15, 16 and 17. 

MR. POWERS: Okay. I have that for my 
records. 

Great. We may return to this later. 

MR. STEPHENS: All right. 

BY MR. POWERS: 

Q. For right now, let's move on. 

Ms. Ledford, you were born in Gwinnett 

County? 

A. Yes. 

Q. Are you a lifelong resident of Gwinnett 
County? 

A. Yes. 

Q. And where in Gwinnett County do you live? 
A. Grayson. 

Q. Do you live in the incorporated part of 
Grayson? 
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A. No. 

Q. Could you please tell me about your 
professional employment history and background. 

A. Sure. I started working for Gwinnett County 
in October of 1987 as a temporary employee. In 
February of '88, I went to being a full-time 
employee. 

I started out as a clerk then graduated to 
voter registration coordinator and then assistant 
director and then director. 

Q. So you're currently the elections director 
for Gwinnett County? 

A. Yes. 

Q. How long have you been elections director 
for Gwinnett County? 

A. I believe since the end of 2001. 

Q. And before that, you were the assistant 
elections director? 

A. Yes. 

Q. How long were you the assistant elections 
director for? 

A. I don't remember. 

Q. What was your title before assistant 
elections director? 

A. Voter registration coordinator. 
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Q. What responsibilities do you have as the 
elections director for Gwinnett County? 

A. To ensure compliance with Title 21. 

Q. That's of the Georgia Election Code? 

A. Yes. Official Code of Georgia Annotated. 

Q. What are your responsibilities that you take 
on to make sure that that happens? 

A. Well, I make sure I understand the code and 
state laws, rules and regulations in regard to all 
voter registration and election processes. 

So I have a staff and I oversee that staff 
to ensure all of those things take place based on 
deadlines, timelines and statutory requirements. 

Q. What kinds of duties do you take on on a 
day-to-day level? 

A. That's hard to say. It depends. If we're 
in an election cycle, the duties are obviously 
different than in a nonelection cycle. 

In an election cycle, we set up a calendar 
for, again, deadlines for absentee balloting by mail, 
advanced in-person voting, setting up our polling 
locations, training, staffing, replacement of all the 
training and staffing that we do. 

We set up online and in-person training for 
the poll officials. In addition to that, we are the 
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official recorder for campaign filings and 
disclosures for candidates and campaigns. We 
maintain all that in our office as well. 

And then, obviously, year round we do voter 
registration and all the processes that go along with 
that, including list maintenance, day-to-day — 

(Reporter requests that witness slow 
down.) 

THE WITNESS: Which includes list 
maintenance, activities, updates, new 
registrations both online and manual. 

BY MR. POWERS: 

Q. Roughly, how many registered voters are 
there in Gwinnett County? 

A. We have right at 600,000. Approximately 
550,000 active and then approximately forty to 50,000 
inactive. 

Q. It takes a lot of organization to manage an 
operation of this size? 

A. Yes. It does. 

Q. What training or certifications have you 
received related to election administration? 

A. The Georgia Association of Voters Registrars 
and the Georgia Election Officials Association. 

We have two separate associations in Georgia 
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and I go to those trainings any time they are held. 

I have also done any special trainings that were 
provided by the Secretary of State's Office over the 
years. 

Q. How frequently are those special trainings 

held? 

A. They are infrequent. 

Q. Has the Secretary held any special trainings 
related to the DRE voting machines? 

A. Not for me because I've been he 
doing it for 30 something years. 

Q. Have you been an instructor in 
trainings administered around the state? 

A. I have. 

Q. Could you please tell me about those? 

A. It varies. It depends on what the 
association is concentrating on for that particular 
election. We have done staffing and recruiting. I 
have done voter registration practices and 
procedures. We've also done some type — so it's 
just over — like I said, I've been in association 
for many, many years, so there's been a lot of 
trainings I've worked on. 

Q. That's fair enough. 

Have you served in important roles in the 


re — been 


any of the 
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election administration field at the statewide level 
in Georgia? 

A. I have since Cathy Cox was the secretary of 
state, I was appointed to several committees under 
her. The subsequent secretaries of states, I've been 
appointed to several — I couldn't tell you exactly 
but to different committees. 

And then the latest one I served on was 
Governor Brian Kemp put together a blue ribbon 
commission to study the Georgia Election Code. And 
there were several of us on that committee and that 
was probably three or four years ago. 

Q. Was this the election code review committee? 

A. It was. 

Q. What did that committee look at? 

A. Everything from page 1 to the last page and 
just -- again, just reviewed all of that. 

Q. Was the election code review committee 
involved at all in the creation or review of House 
Bill 316 that was passed in 2019? 

A. No. 

Q. Were you personally involved in the creation 
or review of House Bill 316? 

A. No. 

Q. Ms. Ledford, were you — have you served as 
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president of the Georgia Elections Officials 
Association? 

A. Yes. 

Q. And, roughly, when did you serve in that 

role? 

A. Maybe 10 years ago, roughly. I don't 
remember exactly but about eight to 10 years ago. 

Q. Have you served on the national task force 
for poll worker and public education? 

A. I don't think so. 

Q. Have you served on committees with the Voter 
Registrars Association of Georgia? 

A. Yes. 

Q. Could you tell me a little about that? 

A. No. I don't remember. There's a lot of 
years so a lot of committees. 

Q. Fair enough. 

Is it fair to say that through these various 
roles, you're knowledgeable about the election 
administration practices and procedures employed by 
counties throughout Georgia? 

A. In Gwinnett County, Georgia. 

Q. Does that knowledge extend to the voting 
methods and systems used in other counties in 
Georgia? 
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A. I know how Gwinnett County conducts our 
policies and procedures. I don't want to speculate 
how other counties would interpret and apply laws, 
rules and regulations. 

Q. What has your role been with respect to 
implementing and using the DRE voting machine system 
that's used in Gwinnett County elections? 

A. Well, I was the assistant director when we 
began using DREs in 2002. So just being the 
assistant, I worked on the distribution of the 
equipment and how — which precincts were going to 
get how much equipment; looking at numbe 
registered voters. And then I assisted 
implementing the L&A testing that we use 

Of course, all the instruction was provided 
by the Secretary of State, so we just implemented 
what was provided to us. 

Q. What was your role with respect to 
implementing the logic and accuracy testing? 

A. Just making sure the paperwork was in order 
and verifying it afterward. 

Q. We'll probably return to that subject later 

on. 

Who at the Gwinnett County Board of 
Elections is responsible for ensuring that the DRE 


rs of 
in 
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voting system used in the county is functioning 
properly? 

A. The Elections Division and staff. 

Q. Which staff members specifically? 

A. Well, we have an election coordinator who 
heads that up and then he has two election 
associates, two that work under him and then we hire 
approximately five to 15 to 20 depending on the type 
of election, temporary employees. 

Q. What is the name of the election 
coordinator? 

A. Kelvin Williams. 

Q. What are the names of the other 
members that you mentioned who do a lot o 
this ? 

A. Demond Smith and Tiffany Vang. 

Q. Thank you. 

Ms. Ledford, what is the annual budget of 
the Gwinnett County Board of Elections roughly 
speaking? 

A. Again, it depends. In an election year, it 
can be five to ten million depending on the election 
cycle that we're in. In an off-election year, we 
only have what we call an admin budget and that's 
usually anywhere from 1.5 to three million. 


two staff 
f work on 
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Q. Let's talk about the Gwinnett County Board 
of Elections' budget in an election year. 

What are the major line items that take up 
the bulk of the five- to ten-million-dollar budget 
that you just referred to? 

A. Poll official payroll. 

Q. What else? 

A. Professional services. 

Q. What constitutes professional services? 

A. Temporary employees and translation. 

Q. You're talking about Spanish language 
translation? 

A. Correct. 

Q. How much of that budget goes into DRE 
machine testing and maintenance? 

A. I couldn't tell you exactly. 

Q. Is it hard work to do the DRE machine 

testing and maintenance? 

A. It is. 

Q. Could you tell me about the pieces that go 
into the DRE machine testing and maintenance? 

A. Sure. It's a couple of tests. We perform 
what's called a diagnostic test, which means we 
ensure that the touches on the machine match up what 
they should. 
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The second part of the testing is what we 
call automatic L&A. And you run a series of tests on 
that and it produces a pattern. And we verify that 
that pattern is correct based on what we know it 
should be for that election. And that is all 
documented. 

Q. So the Gwinnett County Board of Elections 
has documents reflecting diagnostic tests and the 
automatic logic and accuracy testing? 

A. Yes. 

Q. Are those tests run on every single 
DRE machine that's used in early voting 
election day? 

A. Yes. 

Q. How many DRE machines does Gwinnett County 

own? 

A. Roughly 1800. 

Q. How many of those are used in an even-year 
election cycle? 

A. It just depends on what election cycle we're 
in. Obviously, the gubernatorial year doesn't 
require as many as a presidential year and so we base 
it on past history and anticipation. 

Q. Fair enough. So say the November 2018 
general election, roughly, how many voting machines 


and 
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did you use for that election? 

A. I don't know because I don't remember. 

Q. In a presidential election year, does the 
County use all of its DRE voting machines? 

A. We do not. 

Q. Do you recall what the greatest number of 
DRE machines the County has used in a particular 
election? 


A. I do not. 

Q. How much does it cost to store the DRE 


machines ? 


A. 

Q. 

the DRE 

A. 

Q. 

A. 

Q. 

A. 

Q. 


current 

A. 


Nothing. 

The County doesn't pay for the storage of 
machine ? 

Huh-uh. 

Who pays for that? 

They are stored onsite in a secure location. 
On county property? 

Yes . 

You might have mentioned this before. 

When did Gwinnett County begin using the 
DRE voting system? 

2002 . 


Q. What voting method was in place for in-vote 
in-person — sorry. 
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What voting method was in place for 
in-person voting on election day in Gwinnett County 
before the current DRE system? 

A. The optical scan system. 

Q. Could you please describe that optical scan 
system for me? 

A. It's the same system that we use today for 
absentee and provisional balloting. It's a bubble-in 
system. And the voter is provided their particular 
ballot style. They would have voted by bubbling it 
in and then they would have put it into the scanner 
prior to leaving the poll. 

Q. Hand-marked paper ballots? 

A. Yes. 

Q. How long was that optical scan hand-marked 
paper ballot voting system used for? 

A. Two years. 

Q. What brand or manufacturer was used for the 
optical scan system? 

A. At the time it was called GEMS, Global 
Elections Management System. 

Q. Thank you. 

And before that optical scan system, what 
voting method did Gwinnett County use? 

A. Punch card. 
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Q. Could you describe the punch card voting 
system? 

A. Really? 

The voter would be provided their ballot. 

If it was a primary, they would have to specify 
Democrat or Republican because you had different 
voting booths. 

The voter would then be given a card and 
they would slip it into a little unit. And there was 
a tiny punch. And you had a booklet. And the 
numbers in that booklet coincided with the ballot and 
so they would punch whichever number matched the 
person that they wanted to vote for. 

At the end, they would take it out and then 
it would be placed into a ballot box — a locked 
ballot box. 

Q. Is that similar to — were there chads or — 

A. Yes. That's exactly what it was. It was 
that system. 

Q. Oh. And how long was the punch card system 
used for as best you know? 

A. From my knowledge, from 1973 until we 
purchased the new system in 1999. 

Q. Do you recall receiving complaints from 
voters about the punch card system? 
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A. I don't remember. 

Q. Fair enough. 

Let's go back and talk about the optical 
scan system a little more. 

You mentioned that it was in place for 
two years. Which years was the optical scan system 
in place for? 

A. 2 0 0 0 and 2 0 01. 

Q. So the optical scan system was in place for 
the 2000 presidential election? 

A. Yes. 

Q. Do you recall if the optical scan system was 
used only by Gwinnett County or if it was something 
that other counties in Georgia were also doing? 

A. To my knowledge, there were only two 
counties: Gwinnett and Chatham. 

Q. Your role at the time was assistant 
elections director? 

A. Correct. 

Q. What role did you play with respect to 
implementing the optical scan system? 

A. I was partly involved with the decision on 
the vendor. We had several demonstrations. Once it 
was chosen, then I worked with the elections director 
at the time and the staff to develop the training and 
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L&A testing for that as well, again, which at that 
time would have been provided by the vendor. 

Q. Can you describe the kind of logic and 
accuracy testing that was used on the optical scan 
testing? 

A. Very similar. You do diagnostic testing 
first to make sure the unit itself is operational, 
reading the bubbles. 

And then the second part was much more 
difficult than the DRE system because you had to 
develop a handwritten — or hand-marked test deck. 

And you had to create that certain pattern. So we 
had thousands and thousands of optical scan ballots 
and based upon the style would have to be read into 
those units. And it took a significant amount of 
time to create those test decks. 

Q. Understood. 

When ballots were cast in person on election 
day using the optical scan system, were the ballots 
counted at each polling place or at the County Board 
of Elections Office? 

A. They were tabulated onto the memory card in 
each of the OS units and then that information was 
brought back to the Elections Office for the official 
certification. So it was aggregated at the Elections 
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Office. 

Q. Did you think that the county's processes 
for counting the hand-marked paper ballots were 
affected? 

A. "Counting" meaning for the poll officials or 
for the main office? 

Q. Both. 

A. Well, it was difficult for the poll 
officials because optical scan ballots carry a 
different set of problems just like any set does. 

And if you had a voter who overvoted a ballot or had 
something wrong with it and the unit wouldn't take 
it, that ballot would be spoiled. The voter would be 
given an addition ballot. They would have to go 
down — 

(Reporter requests that witness slow 
down.) 

THE WITNESS: The voter would be given 
the option to take a second ballot or 
continue to have that ballot spoiled and not 
cast. And we had that happen more 
frequently than I think people realize 
because they didn't want to go back and do 
that. And so it created, you know, a 
significant issue with that. 
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The machines themselves were not 
problems. As far as the tabulation, the 
aggregation of the results, it was not an 
issue. 

BY MR. POWERS: 

Q. Mm-hmm. Do you recall how many complaints 
you — strike that. 

Do you recall receiving any complaints from 
voters about having to cast the second paper ballot 
or not having their paper ballots scanned properly? 

A. Yes. 

Q. How many complaints do you recall receiving? 
A. I don't. It's been too long. And like I 
said, we only used it for two years. It was 
significant enough that it stuck in my mind is the 
only way I know how to describe that. 

Q. Sure. Do you have any -- strike that. 

Did you have any concerns about the 
integrity of the elections that were conducted in 
Gwinnett County using the hand-marked paper ballots? 

A. I don't remember. 

Q. Sitting here today, do you have any concerns 
about the integrity of the elections that were 
conducted in Gwinnett County using hand-marked paper 
ballots ? 
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A. No. 

Q. Do you recall experiencing any problems with 
the optical scanning system besides those that you 
just described? 

A. Yes. Occasionally — the unit itself has 
the memory card and memory card has a battery in it. 
And, obviously, you don't always know the battery 
life. You buy them off the shelf and you think they 
are brand-new, but, perhaps, they are older. 

So oftentimes the battery would die in a 
memory card. And, of course, the poll officials had 
back-up memory cards, but that would stop voting. 

And there was a process that they had to go through 
to remove the dead memory card and insert the new 
one. 

And then that translated also as well to the 
aggregation of the results on election nights; we 
would be doing — trying to download results and we 
wouldn't be able to because the battery would die. 

So we would have to take that memory card, change out 
the battery and get the elections results. 

Q. Could you explain to me — I admit I don't 
know all the technology. 

Could you please explain the difference to 
me between memory cards that are used for the optical 
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scan system and the memory cards that are used for 
the current DRE voting system? 

A. I can't give you the technical. I can give 
you the user end. They are very, very similar. They 
are both used to get the election — the votes cast. 

Both optical scan and DRE units have 
redundant memory where votes casts are stored so that 
if you absolutely get the information from the card, 
you can get it from the unit. 

Q. Any other differences? 

A. Again, I'm not a techie, so I can only give 
you the user end of it. 

Q. To the best of your knowledge, were there 
any differences? 

A. No. 

Q. The battery problem that you described with 
respect to the optical scan system, wouldn't that 
also apply to the current DRE voting system memory 
cards ? 

A. It does not seem to. And I believe that is 
due to the fact that those units are charged every 
three months. And so even if the battery — if 
something happened in the memory card, the battery in 
the unit will hold for four hours. 

Q. Could you charge the batteries for the 
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optical scan system? 

A. No. Because that battery is totally 
contained within the little memory — it's a watch 
battery. 

Q. I just learned something. 

Going back to my earlier question. Do you 
recall there being any other complaints from voters 
about the optical scan system used in 2000 and 2001? 

A. The only other one was the amount of time it 
took to do a recount because you have to handfeed all 
of that information again. You don't upload the 
card. 

Q. Did you conduct any recounts in 2000 or 2001 
while the optical scan system was in place? 

A. We did and it was a statewide. I don't 
remember the race, but it was a statewide race and it 
was thousands and thousands of ballots. 

Q. Mm-hmm. Do you recall roughly how long the 
recount took? 

A. I believe it was a day and-a-half and that 
was a solid eight hours with several units. I don't 
remember the number. Several units being utilized 
and the staff rotating, you know, because you 
couldn't — you had to stand to do it and we couldn't 
stand for that amount of time. Like I said, it was 
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significant. 

Q. Got it. And so just to make sure I 
understand it correctly, it took a day and-a-half to 
feed all of the hand-marked paper ballots cast in 
Gwinnett County for that statewide election through 
the optical scanners? 

A. Correct. 

Q. Thank you. 

Any other complaints? 

A. Not to my knowledge. 

Q. Switching gears for a second, Ms. Ledford, 
would you please describe for me Gwinnett's election 
calendar for 2019? 

A. Our election — well, we had a special 
transportation referendum in March. 

Q. Is Gwinnett County conducting any other 
elections in 2019? 

A. No. 

Q. What is Gwinnett County's election calendar 
for 2020? 

A. Full. We have the presidential preference 
primary, the general primary, a potential general 
primary runoff, a potential federal primary runoff, 
the general election, the general election runoff and 
then a potential federal election runoff. 
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So that's, what, six, eight potential 
elections. So it's from — we already start 
preparing this year for next year. 

Q. Understood. What kinds of preparations are 
you making this year for next year's election? 

A. Well, currently, we're in the process of 
looking at our training, not necessarily the 
equipment specific because we don't know what that is 
but procedures around the poll officials' processes 
for proof of U.S. citizenship, voter registration 
reconciliation problems, what to do in emergency 
situations. At this point that's really all that 
we've tagged onto for that. 

Q. I'd like to turn back briefly to Plaintiff's 
Exhibit 5, which — which we talked — we marked 
before. And since there's one copy, let's — this 
will be a little tricky. 

But could you describe to me the — what 
Plaintiff's Exhibit 5 is and, perhaps, we can go from 
there. 

A. Sure. These are the intergovernmental 
agreements for the loan of the election equipment to 
the cities in Gwinnett County. 

Q. Mm-hmm. Which cities were these agreements 
signed with? 
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A. Duluth. Lawrenceville. Lilburn. Norcross. 
Peachtree Corners. Snellville. Sugar Hill. And 
that's for 2017 and 2019 respectively. 

Q. Would you mind describing the content of the 
contracts in a little more detail? 

A. It's basically just saying that we will not 
conduct your election, but we will allow you the loan 
of the equipment to conduct your elections. And then 
we provide whatever number pieces of equipment that 
they're requesting. 

Q. Is the number of machines requested part of 
that agreement? 

A. It is. I don't — yes, it is. 

Q. And so -- 

A. It's actually — no. There's another sheet 
that they send in that we don't actually put with the 
contract. So we'll have to get that. 

So that tells us how many voting machines 
they want, how many optical scan units and the 
peripherals that go with them. 

Q. Do you know sitting here now the number of 
machines that — 

A. It's usually less than 10. 

Q. Is it roughly less than 10 per city? 

A. Correct. 
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Q. Are each of the cities with whom there's an 
intergovernmental agreement conducting a municipal 
election in 2019? 

A. Not necessarily. They go ahead and submit 
the IGAs because of the process they have go through 
with their city councils and with our Elections Board 
so that we have them in place. If they do let us 
know they're having an election, then we can set 
aside the equipment that they've requested. 

Q. How does the process work logistically in 
terms of the Gwinnett County BOE transferring custody 
to the cities? How does that work? 

A. Once we know they are having an election, 
again, we set aside the number that they want. And 
then if they tell us they are having an election, 
they tell us what date they need it and then they 
come and pick up their equipment. And then they set 
it up, take custody and then they bring it back to us 
after the election. 

Q. What training do you provide, if any, 
related to the use of the DRE voting machines? 

A. We do not. 

Q. You don't provide any training — 

A. We do not, huh-uh. 

Q. What — strike that. 


.APGREPORTING.COM 


APG USA INC. 


(888) 542-5598 



1 

2 

3 

4 

5 

6 

7 

8 

9 

10 

11 

12 

13 

14 

15 

16 

17 

18 

19 

20 

21 

22 

23 

24 

25 


Case l:17-cv-02989-AT Document 441 Filed 07/01/19 Page 268 of 443p age 45 

Curling et al. v. Deposition of 

Raffensperger et al. T. LYNN LEDFORD 6/24/2019 

What are the security controls that 
municipalities have to follow with respect to their 
use of the DRE voting machines? 

A. I don't know. I would assume it's the same 
as ours. And I'm not supposed to say "assume." But 
we don't train them, so we don't know. Their 
information comes from the Secretary of State's 
Office, but I'm sure they are very well aware they 
are supposed to keep everything sealed. 

Q. Could you describe what you mean with 
respect to keeping the DRE machines sealed? 

A. Well, once they are — you unseal them at 
the beginning of the day and then you reseal them at 
the end of the day with a numbered seal and there's 
various numbered seals. 

Q. Does the -- strike that. 

Do the cities provide documentation with 
respect to the seals when they return the DRE 
machines to you? 

A. I don't know. 

Q. Do you know if the Gwinnett County BORE has 
any records of sealed information provided by the 
municipalities? 

A. I don't know. 

Q. How are the DRE machines — strike that. 
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Who does the programming for the DRE 
machines in municipal elections? 

A. I don't know. 

Q. Is it fair to say the Gwinnett County Board 
of Elections does not do the programming for the — 

A. Correct. 

Q. Sorry. Let me finish my question. 

A. Oh. 

Q. Is it fair to say that the Gwinnett County 
Board of Elections does not do the testing for DRE 
machines for municipal elections? 

A. Correct. 

Q. Thank you. 

Do you know if municipalities have GEMS 

licenses ? 

A. I do not. 

Q. Does the Gwinnett County Board of Elections 
provide any kind of guidance or share any information 
with municipalities related to the use of DRE voting 
machines ? 

A. We do not. 

Q. Let's switch gears for a second and talk 
about last second changes that the board of elections 
might have to make before an election. 

Can you recall any instances in which 
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Gwinnett County officials had to make last second 
changes or adjustments to plans for conducting 
elections ? 

A. Yes. 

Q. Could you please describe those situations? 

A. I don't remember. I just remember it caused 
mass confusion. 

Q. Fair enough. 

So let's take the 2018 election, for 

example. 

Did the Gwinnett County Board of Elections 
have to change procedures for processing voters whose 
registration was placed in pending status? 

A. I don't remember. 

Q. Did the board of elections in 2018 have to 
make adjustments to procedures for processing 
absentee ballots? 


A. 

Yes 

• 




MS . 

MARKS: 

Let' s 

take a break... 


MR. 

POWERS: 

That ’ 

1 s fair. You want to 


take a five-minute break and see if we can 
do something with the thermostat? 

MR. STEPHENS: All right. 

MR. POWERS: Go off the record. 

(Recess from 10:45 a.m. to 10:58 a.m.) 
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BY MR. POWERS: 

Q. So before we move on, perhaps, do a little 
bit of clean up on some questions that I posed to you 
before the break. 

Before the break you spoke about moving from 
the punch card voting system to the optical scan 
system in 2000. 

I wanted to ask what general response you 
received from voters upon the change from the punch 
card voting system to the optical scan system? 

A. Initially it was confusion. Anytime you 
have a change, you have to do public education and 
voter education. So they were confused to begin 
with. 

But the problem we had with that we still 
continue to have today. When you have a general 
election, you have a write-in candidate. Say you 
have voters that want to bubble in Mickey Mouse and 
then come in and bubble in the write-in space for 
Mickey Mouse and then write Mickey Mouse's name on 
it. That is just a continuing problem with that type 
of ballot. 

But, again, initially, it was just 
confusion. And then about the time, you know, we 
used it for the last election, they were used to it 
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and then we changed them over. 

Q. When you say "they were used to it," what do 
you mean by that? 

A. We just didn't get as many complaints as we 
did the first election that we used it for because 
they had gotten used to — you know, they knew to 
bubble in and put it in the scanner and what they 
were looking for. 

Q. From an election administration's 
standpoint, was the optical scan system an 
improvement over the punch card system that had been 
employed before? 

A. I don't know that it was an improvement. It 
was just a change. You know, of course, with what 
happened in 2000, we were glad we weren't on punch 
card. I don't necessarily think it was an 
improvement. I don't necessarily think it was not an 
improvement. It was just a change. 

Q. You had mentioned the write-in issue on the 
optical scan system. Isn't it true that there's — 
you can still write in candidates on the current 
voting system? 

A. Yes. On the DRE and the optical scan but 
the DRE won't let you cast an overvote. That's the 
difference. 
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Q. I wanted to talk about the spoiling issue 
that you had mentioned earlier. You had mentioned 
overvotes. 

Could you explain to difference between when 
a voter casts an overvote and other situations in 
which casting a vote by paper ballot can result in a 
particular vote getting caught up for some reason? 

A. Sure. Again, first, there is the overvote 
and that's when someone votes for more than the 
number of candidates allowed in a particular race. 

So if you're only allowed to vote one and you vote 
two, then it kicks that out. That's considered an 
overvote. 

If a voter happens to make a stray mark in 
the timing marks around the ballot, sometimes that 
will kick it out. If the ballot isn't printed 
exactly correctly, if it's just a millisecond 
issue — I don't know. I'm not a tech person. But 
if it's the least bit off, it will not accept the 
ballot, which would be a broader problem with more 
ballots, but you can see that as well. 

If for some reason a ballot was damaged, 
perhaps, if an absentee ballot, at someone's home 
they spill coffee or tea on it or if they used 
Wite-Out ®, the liquid Wite-Out ®, it considers it an 
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overvote because it reads the metal in the Wite-Out 

®. 

So that's the main things that I remember 
that we encountered and that we still encounter today 
with the absentee ballots by mail. 

Q. When there's an overvote in a particular 
race and it's — the optical scanner kicks it out, I 
believe you said, does the — do the votes for the 
rest of the races on that same ballot count? 

A. It would now only by absentee by mail, but 
in the polls it would not because the machines are 
programmed to kick those out. And so the voter would 
either have to — like it'd spoil that ballot and 
lose their vote or get a second ballot and revote and 
insert it into the machine. 

Q. What about in cases of — strike that. 

What about provisional ballots? 

A. Well, there wouldn't be overvotes on 
provisional ballots because those are duplicated by 
staff. Ninety-eight percent of our ballots are 
duplicated. 

Q. Could you briefly explain what the 
certification process is after an election passes 
and — I'll start there. 

Could you explain the certification process 
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after an election passes? 

A. Yes. Once we've received all of the memory 
cards from the polling locations on election night, 
all that is aggregated into the GEMS server. We then 
add in the absentee ballots by mail figures and then 
the provisional ballots are scanned and they're added 
in there as well. 

And once everything has been aggregated into 
that system, it produces a report and that report is 
used to certify the election. 

Q. When you're certifying an election, what is 
it that you're certifying to? 

A. That the vote totals from those cards is 
what was produced on that report. 

Q. Did you certify the results of all elections 
conducted while the optical scan system was in place 
in 2000 and 2001? 

A. Yes. 

Q. Earlier you mentioned an issue on — that 
had occurred with some of the batteries dying? 

A. Mm-hmm. 

Q. I wanted to ask about the batteries that are 
employed on the optical scanners that are used today 
to process both absentee and provisional ballots. 

Do the batteries on those optical scanners 
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used today for absentee and provisional ballots have 
the same problem of dying? 

A. Not on the scale that it did when we had it 
deployed countywide. 

Q. What scale does it happen on today? 

A. Maybe one of every third election. And the 
reason for that is we change those batteries when 
we're doing L&A testing. 

Q. What is it that happens one in every three 
elections with respect to the batteries in the 
optical scanners? 

A. The optical scan unit just doesn't accept 
the ballot. It just -- it just stops. It's like 
"I'm done; I'm not doing anything else." 

Q. Is that on one machine? 

A. Yes. 

Q. So in one out of every three elections one 
battery on one optical scan machine dies; is that 
fair? 

A. Right. 

Q. Let's talk briefly again about municipal 
elections to the extent that you know, of course. 

Duluth — is it fair to say that Duluth, 
Lawrenceville, Lilburn, Norcross and Peachtree 
Corners conduct their own municipal elections using 
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DRE voting machines? 

A. Correct. 

Q. Are there any other municipalities in 
Lawrenceville that conduct elections that you're 
aware of? 

A. You mean in Gwinnett? 

Q. Sorry. Strike that. 

Are there any other municipalities in 
Gwinnett County that conduct their own elections that 
you're aware of? 

A. Every city within Gwinnett County with the 
exception of Braselton conducts their own elections. 

We do not conduct any city elections. 

Q. Are there any municipalities in Gwinnett 
County that conduct elections using hand-marked paper 
ballots ? 

A. I do not know. 

Q. Do you know what the City of Snellville does 
with respect to the conduct of its municipal 
elections and its voting method? 

A. I do not. 

Q. Do you know who the points of contact are 
with the cities that do conduct their elections using 
the DRE voting machines? 

A. It's the city clerks, whomever that is at 
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the time. 

Q. And that's who the Gwinnett County Board of 
Elections negotiates the intergovernmental agreement 
with? 

A. It's not really a negotiation, but that is 
the point of contact between our office and the city 
councils. Yes. 

Q. Thank you. 

In Duluth, Lawrenceville, Lilburn, Norcross 
and Peachtree Corners, do you have any knowledge 
about the number of polling places that those cities 
employ? 

A. One. 

Q. Do each of those -- strike that. 

Is it correct that Duluth, Lawrenceville, 
Lilburn, Norcross and Peachtree Corners all hold 
at-large elections? 

A. No. Peachtree Corners has a mayor and three 
at-large positions and then they have three that are 
post-district wards. I'm not sure what they call 
them. 

Q. Thank you. 

To make sure I got this right then, so 
Duluth, Lawrenceville, Lilburn and Norcross hold 
at-large elections? 
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A. Correct. 

Q. Duluth, Lawrenceville, Lilburn and Norcross, 
they each have one ballot stop? 

A. I do not know. 

Q. Do the municipalities have early voting for 
their elections? 

A. Yes. 

Q. How long is that early voting period for? 

A. I don't know. 

Q. Have you run any elections in which 
municipalities are also holding elections or contests 
on the same day? 

A. We had county elections with city elections 
on the same day? 

Q. Yes. 

A. Yes. 

Q. Tell me about how that works in terms of the 
logistics of getting the ballot and ensuring that 
those municipal elections are also on the county 
ballot? 

A. They are not on the county ballot. We don't 
conduct city elections, whatsoever. So on those 
days, voters have two polling locations. They have 
their county polling location and they have their 
city polling location. And they have to go to each 


.APGREPORTING.COM 


APG USA INC. 


(888) 542-5598 



1 

2 

3 

4 

5 

6 

7 

8 

9 

10 

11 

12 

13 

14 

15 

16 

17 

18 

19 

20 

21 

22 

23 

24 

25 


Case l:17-cv-02989-AT Document 441 Filed 07/01/19 Page 280 of 443p age 53 

Curling et al. v. Deposition of 

Raffensperger et al. T. LYNN LEDFORD 6/24/2019 

one respectively. 

Q. In those situations where you have a 
separate municipal and county election on the same 
day, for Duluth, Lawrenceville, Lilburn and Norcross, 
is the County Board of Elections still providing DRE 
machines to the municipalities? 

A. It depends on the size of the election. If 
the election is very large and we have to deploy a 
lot of our equipment, then we do not. If it's a 
smaller election, for instance, a special election, 
then we would allow them the use of the equipment. 

And if not, I do not know what they do. 

Q. You anticipated my next question. 

A. Yeah. 

Q. So is it fair to say that in situations 
where you — say, the Gwinnett County Board of 
Elections has a major election and can't provide 
voting machines to the municipalities, do you have 
any knowledge of what the municipalities do in terms 
of their method of election? 

A. I do not. And it's very rare that we have 
so many cities that we can't provide equipment to 
them. So I really don't know. 

Q. Do you recall any specific elections in 
which municipalities requested voting machines and 
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the Board of Elections was not able to provide them? 

A. No. 

Q. When the municipalities conduct early 
voting, is it the case that each municipality has its 
own separate early voting location? 

A. I do not know. 

Q. Do you know if municipalities hire temporary 
workers who assist with conducting municipal 
elections ? 

A. I do not. 

Q. Let's consider the situation where you're 
about to conduct an election. 

Can you please walk me through the steps of 
how you get the machines ready from the very 
beginning of getting them out of storage to the end? 

A. Well, actually, they are not in storage; 
they are onsite. But we determine the number that 
we're going to deploy per precinct. Again, that's 
based on numbers and past voting history for the 
precinct. 

We pull out ever how many of numbers that is 
per precinct. We tag them with that polling 
location, that precinct number and name. And then 
they are tested based on the day they are going to be 
delivered. 
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We have 11 delivery trucks that deliver for 
three or four days. And so the precincts are tested 
by what day their election equipment is going to go 
out because that helps our rollout. 

And they go through the process as we 
discussed, the diagnostics testing, the automatic L&A 
and in addition to that the — what we call VWD, 
which is the sight and hearing keypad. We test to 
make sure that's correct. 

In Gwinnett County we have to do a second 
check because we have our Spanish language that has 
to be checked as well. 

Once everything is checked, if everything 
checks off okay, then that unit is closed and sealed 
and it gets put on a cart with whatever its truck 
number is. 

Then those are delivered to polls prior to 
election day, then they are unsealed and they use 
them. 

Q. That's a lot. 

A. It is. 

Q. So, perhaps, we should back up for a second. 

Let's take just the designing of the ballot 
piece. Can you take me through the process by which 
the ballot is essentially designed and then loaded 
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onto the DRE machines? 

A. Well, the ballot itself is designed by the 
State. The information that we provide is anything 
local, which would be our local candidates, and any 
questions that we may have. 

Once that is completed — again, we're 
unique. So the State sends it back to us. We have 
to send it out for translation. Once all that takes 
place, then we go through and we do what we call 
"proof the ballots." We ensure that the correct 
ballot styles are appearing at the correct precinct 
with the precinct number. 

Q. You mentioned that the ballot was — is 
designed by the State? 

A. Correct. 

Q. How is the ballot actually transmitted from 
the State to you? 

A. They put it onto — I'm not going — they 
put it onto something electronic. I'm not sure. And 
it's sealed at the State. 

We have to go down and physically sign for 
that file. Again, it's in a sealed bag and we bring 
it back to our office. 

Q. Has that always been the system since the 
DRE voting system has been in place? 
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A. No. Prior to that, I believe, it was 
electronic transmission. 

Q. Mm-hmm. And let's talk about that. 

First, when was the switch made from the 
electronic transmission to the current system of 
physically going and picking it up? 

A. I don't remember. 

Q. Five years ago? 

A. It's been within the last five years. 

Q. That's helpful. 


Please describe to me what the — how the 


electronic transmissi 
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A. It was put onto a CD and we would go and 
pick it up and bring it back to the office. So it 
wasn't a sealed bag like it is now. 

Q. Mm-hmm. And after the election is over, 
what would you do with that CD? 

A. With the ballot layout on it? 

Q. Yes. 

A. I don't remember. 

Q. Okay. Now, let's shift from the ballot 
design to the electronic poll books. 

How long have electronic poll books been 
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used in Gwinnett County? 

A. Since 2 0 02. 

Q. How would — strike that. 

What's the process by which the information 
would get loaded onto the electronic poll books? 

A. How would it get loaded into the electronic 
poll books? We would receive a file from the State. 
And then we put it onto a memory card. And then we 
insert the memory card into the express poll unit. 

Q. How do you currently receive — well, strike 

that. 

First, what's the file that you receive from 
the State? 

A. It's called the — it's just called the 
"voter file," yeah. Bulk update file. 

Q. Got it. 

And how would — now under the current 
system, how do you currently receive the bulk update 
from the Secretary's office? 

A. I don't know because it has changed as well 
and I don't know how we get it now. 

Q. Do you recall how the Secretary transmitted 
the bulk update before the current system? 

A. I believe it was a secured FTP site. 

Q. Could you please tell me more about how the 
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bulk update was transmitted through the secured FTP 
site? 

A. No because I wasn't involved in that 


process. 

Q. Who was involved in that process? 

A. Multiple staff members. 

Q. Do you recall any of their names? 

A. The same three I gave you earlier are the 
main three. 

Q. Just to make sure I understand it at sort of 
the broadest level, tell me if I have this right. 

So essentially the Secretary — 
to say the Secretary of State — wait, it 
the Secretary of State's Office necessari 
be wrong about that. 

When the Kennesaw CES was in place, were you 
receiving the bulk update from the Kennesaw Center 
for — 


is it fair 
wouldn't be 
ly. I might 


A. — Election Systems. 

Q. Thank you. When the Kennesaw Center for 
Election Systems was in place, were you receiving the 
bulk update from the Kennesaw Center for Elections 
Systems ? 

A. I believe that's correct. 

Q. Is it fair to say that the Kennesaw Center 
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for Election Systems would post the bulk update on a 
secure FTP site and then someone with the Gwinnett 
County Board of Elections would download the bulk 
update from the FTP site? 

A. Yeah. 

MR. TYSON: Uh... okay. Fine. You 
already answered. That's fine. 

BY MR. POWERS: 

Q. Do you recall how long that process was in 
place for? 

A. I do not. 

(Plaintiff's Exhibit 8 was marked for 
identification.) 

MR. POWERS: I'm going to hand you what 
I'm marked for identification as Plaintiff's 
Exhibit 8. 

Copies for everyone. There's three 
here. 

BY MR. POWERS: 

Q. Have you had a chance to look it over? 

A. Mm-hmm. 

Q. Ms. Ledford, what is Plaintiff's Exhibit 8? 

A. It looks like something from Kennesaw State 
or someone saying how the voter files are put out 
there — or the — yeah — oh, I'm sorry — ballot 
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file for ballot proofing, yeah. 

Q. You mentioned ballot proofing. Again, help 
me understand. Does that — so talking about 
Plaintiff's Exhibit 8, are the contents of the files 
described in Plaintiff's Exhibit 8 relevant to the 
formatting of the ballot, the bulk update for the 
electronic poll books or both? 

MR. TYSON: I'm going to object that we 

lack foundation for where we are. Has she 
seen this document before? Has she relied 
on this document. If we can lay some 
foundation before we get into that. 

MR. POWERS: Sure. 

BY MR. POWERS: 

Q. Yeah. So Ms. Ledford, have you seen 
Plaintiff's Exhibit 8 before? 

A. No. 

Q. Have you seen documents similar to 
Plaintiff's Exhibit 8 before? 

A. No. 

Q. Who from the Gwinnett County Board of 
Elections would have been receiving these kinds of 
files from the Secretary? 

A. Kelvin Williams and Kristi Royston. 

Q. Got it. So if communications were coming 
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from the Secretary or from the Kennesaw Center for 
Elections Services, they probably would have been 
going to Kelvin or — Kelvin Williams or Kristi 
Royston? 

A. Well, they would not have been going to 
them. They would have been made aware that they were 
out there and available for them to retrieve. 

Q. Are you familiar with the types of files 
that are listed in Plaintiff's Exhibit 8? 

A. I know what they are talking about. I've 
never actually seen them. 

Q. Let's talk about — let's turn to the second 

page. 

In particular, let's talk about the third 
item listed here which I will call Cherokee County, 
slash, express poll, slash, ED file, slash November 
2016 general election dot zip. Do you see that? 

A. Mm-hmm. 

Q. Do you see where it says that this is not a 
file posted for each county? This file is only 
posted to those counties who produce the storage 
media into the jurisdiction's express polls 
themselves. Counties that do this operation are 
Fulton, Cobb, DeKalb, Gwinnett, Forsyth, Chatham, 

Henry, Columbia, Clayton and Cherokee. 
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Do you see that? 

A. Yes. 

Q. Would you mind explaining to me in layman's 
terms what this — what this is in terms of producing 
the storage media and loading it into the express 
polls? 

A. No — 

MR. TYSON: Object again on foundation. 

I don't think we've established that she 
knows what this process is referring to 
before you get into details of it. 

MR. POWERS: Yeah, no, that's fa 
Perhaps, we should go through some o 
and talk about them individually. 

BY MR. POWERS: 

Q. Let's start with — on the first page, the 
very first one, Appling County, slash, proof, slash, 
audio, slash, Appling audio. 

Is that a file that Gwinnett County uses? 

A. Yes. 

Q. What is that file? 

A. It is the file that is used for the — 
what's called the VWD, which is voters with 
disability. This is the ballot that has been 
recorded for use with that piece of equipment. 


ir. 

f these 
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Q. That's something that Gwinnett County uses? 

A. Yes. 

Q. Let's move down one. 

Do you see where Plaintiff's Exhibit 8 lists 
the file Appling County, slash, proof, slash, ballot, 
slash, 01, dash, Appling dot zip? 

A. Yes. 

Q. What is that file? 

A. That's the ballot proofing file. 

Q. Again, would you mind explaining in layman's 
terms what the ballot proof is? 

A. Yes. We actually print out every possible 
ballot style within Gwinnett County and we ensure 
that everything on that ballot is correct; that the 
districts are correct, that the spelling is correct, 
the titles are correct and the instructions for the 
voter — vote for one, vote for two — we ensure all 
that information is accurate. 

Q. Is that proof — strike that. 

Is that ballot proof just for paper ballots 
or for the DRE machines as well? 

A. I don't know. I can't remember. 

Q. Is that ballot proof for the DRE voting 

machines ? 

A. I don't know. 
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Q. Turning back to the Appling County proof 
ballot 01 Appling dot zip file, is that a file that 
the Gwinnett County Board of Elections uses? 

A. Yes. 

Q. Let's skip down a little bit to the third 
one from the bottom. So we're skipping one. The 
file that says, Appling County, slash, express poll, 
slash number list 001, in parenthesis 11-08-2016 dot 
PDF? 

A. Mm-hmm. 

Q. What is that file? 

A. That's the number list of voters. And what 
that is is a list of people who voted at each 
precinct, not in, you know, any kind of order, just 
who voted. 

Q. Does Gwinnett County use that file? 

A. We do. 

Q. Let's turn back to the second page. I guess 
it would be right in the middle there. 

Do you see the copy that -- strike that. 

Do you see the file that's listed Clayton 
County, slash, GEMS DB, slash, asterisk, asterisk, 
asterisk dot GBF? 

A. Yes. 

Q. What is that file? 
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A. I have no idea. 

Q. Moving to the second from the bottom, do you 
see the file listed as Richmond County, slash, GEMS 
DB, slash, 2 period GEMS instructions dot PDF? 

A. Yes. 

Q. What is that file? 

A. According to this, this is a manual on GEMS 
operation. I do not — I have not seen that. 

Q. So considering Plaintiff's Exhibit 8 as a 
whole, is it fair to say that several files are 
listed in Plaintiff's Exhibit 8 that the Gwinnett 
County Board of Elections uses? 

A. Yes. 

Q. Are these files that the Gwinnett County 
Board of Elections received at some point from the 
Kennesaw Center for Election Services? 

MR. STEPHENS: If you know. 

THE WITNESS: I just want to make sure 
there was no objection to that one. 

MR. TYSON: You're fine. 

THE WITNESS: Yes. 

MR. POWERS: Perhaps, we can have the 
court reporter read back the question. 

(Whereupon, the record was read back as 
follows: 
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Q. Are these files that the Gwinnett 

County Board of Elections received at some 

point from the Kennesaw Center for Election 

Services ?) 

THE WITNESS: Yes. 

BY MR. POWERS: 

Q. Were these files received from the FTP 
server that Kennesaw Center for Election Services 
used? 

A. I could not confirm that. 

Q. Ms. Ledford, do you currently still receive 
many of the files that are listed in Plaintiff's 
Exhibit 8? 

A. Correct, yes. 

Q. Whom do you currently receive the files 

from? 

A. The Secretary of State's Office. 

Q. Do you receive those files in person through 
the means — strike that. 

Remind me again how you receive the files 
listed in Plaintiff's Exhibit 8 from the Georgia 
Secretary of State's Office? 

A. I couldn't tell you how we receive all of 
those. I just know there are certain ones that — 
they let us know they are ready. We personally go 
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down. And we pick them up in a sealed container and 
unseal them once they are in our office. 

Q. Thank you. 

All right. Let's turn back to talking about 
absentee ballots. 

Running an absentee ballot program in a 
county the size of Gwinnett County is a complicated 
operation. Would you agree? 

A. Yes. 

Q. Many voters — strike that. 

Is it fair to say that there are many 
absentee ballots cast in Gwinnett County elections? 

A. Yes. 

Q. Do you recall approximately how many 
absentee ballots were cast in the November 2018 
general election? 

A. Approximately 18,000. 

MR. POWERS: In fact, I'm handing you 
what I'm marking for identification as 
Plaintiff's Exhibit 9. 

(Plaintiff's Exhibit 9 was marked for 
identification.) 

BY MR. POWERS: 

Q. Maybe we could just go through Plaintiff's 
Exhibit 9 briefly. 
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First, what is Plaintiff's Exhibit 9? 

A. It is the certified election results from 
the November 6, 2018 general election. 

Q. Could you explain briefly what the certified 
general elections results are? 

A. Sure. This is a listing of all the 
candidates and issues that appeared on the ballot. 

It gives you the name, the party, if it was a party 
official. It gives you the results of the polling 
location from election day, absentee by mail, 
absentee — I'm sorry — advanced voting in person 
and then provisional ballots that were tabulated for 
these races. 

Q. You anticipated my question. 

So, yeah, if you wouldn't — so in the 
middle of the document, it looks like there are five 
columns: polling, ABM, AIP, AIP2, PRO — P-R-0 — 

and total. 

And if you wouldn't mind just taking me 
through those columns and explaining what they mean. 

A. Sure. Polling is the votes that were cast 
at the polling location on election day exclusively. 

Absentee by mail is all the absentee ballots 
that were received in the office and tabulated. 

AIP and AIP2 are advance in-person location. 
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That's broken down into two columns because the GEMS 
server will only recognize 99 units for one vote 
center and we have over a hundred. So that's broken 
down into two; nothing specific in either one of 
those. 

Provisional is the number of provisional 
ballots that were cast and tabulated for those races. 

Q. Which of the columns listed in Plaintiff's 
Exhibit 9 are cast on DRE voting machines? 

A. Polling, AIPl and AIP2. 

Q. Is it fair to say that the ABM and PRO, or 
provisional ballot columns, are cast using 
hand-marked paper ballots? 

A. Correct. 

Q. I'd like to just briefly run through a 
couple of the election totals starting with governor. 

In particular in the governor's election in 
2018, how many total votes did the three candidates 
for governor receive? 

A. Individually you mean? 

Q. Yes. 

A. Okay. Brian Kemp 132,998. Stacey Abrams, 
one thousand — I'm sorry — 178,097. Metz 30,892. 

And then 196 write-in votes. 

Q. Thank you. 
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A. Mm-hmm. 

Q. Can you please do the same for the 2018 
lieutenant governor's election in Gwinnett County? 

A. Yes. Jeff Duncan 132,992. Sarah Amico 
170,229. And then write-in votes 299. 

Q. Thank you. And can you please do the same 
for the 2018 Secretary of State election in Gwinnett 
County? 

A. Yes. Brad Raffensperger 130,813. John 
Barrow 172,213. Duval 8,634. And 127 write-ins. 

Q. Thank you. 

Can you please do — we're going to skip one 
and if you could please do the same for me for the 
commissioner of agriculture race in 2018 in Gwinnett 
County. 

A. Yes. Black 140,219. Swan 168,343. And 247 
write-ins. 

Q. Thank you. 

And then if we can turn to the next page, if 
we could turn — looking in the middle of the page, 
if you wouldn't mind doing the same for me for the 
commissioner of labor race in 2018 in Gwinnett 
County. 

A. Butler 138,912. Keatley 170,286. One 
hundred and fifty-two write-ins. 
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Q. Thank you. 

A. Mm-hmm. 

Q. All right. Let's talk about absentee 
ballots. 

Would you mind taking me through, again, 
from the beginning to the end, the process by which 
paper ballots are designed, created and disseminated 
to Gwinnett County voters? 

A. Yes. They are created by the Secretary of 
State's Office in conjunction with us providing the 
local information. They create it. They send us the 
ballot proof. We proof it. And then we receive a 
file — a file is credited. We create and print — 
don't create. I apologize. We print our own ballots 
based on need and we mail them to the voters. 

Q. When you're creating the absentee ballot, 
does -- strike that. 

What role does the GEMS database play in 
creating the ballot? 

A. I couldn't say from the Secretary of State's 
Office. We receive the ballot, we put it into it and 
it aggravates the vote totals. 

Q. Is the Gwinnett County Board of Elections 
proofing the GEMS database? 

A. Yes. 
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Q. Describe to me that proofing process that 
the GEMS database -- 

A. The file that was described in Exhibit 8, we 
receive that file. And then we print out all of 
those ballots and they are manually checked by two to 
four people depending on the size of the ballot. 

Q. For the sake of the record, can you identify 
the file in Plaintiff's Exhibit 8 that you're 
referring to? 

A. No. It's not me that does it, so... 

Q. Fair enough. I wouldn't be able to identify 
it either. 

So then — but it's your belief that it's 
one of the files that is listed in Plaintiff's 
Exhibit 8? 

A. I couldn't say that because I'm not familiar 
with the file, so I don't want to speculate. 

Q. Who at the Gwinnett County Board of 
Elections is proofing the database? 

A. Kristi Royston is the lead and then she 
chooses the people that work with her on that. 

Q. Do you know how she goes about proofing? 

A. I don't. 

Q. You had mentioned — strike that. 

Does the proofing include the Spanish 
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language? 

A. It does. 

Q. Who is doing the proofing of the Spanish 
language portion? 

A. Staff members, different ones. 

Q. Would the staff members have to know Spanish 
to proof the Spanish language portion of the — 

A. Yes. 

Q. Remind me again, so once you've gotten the 
proof back from the secretary, what happens next? 

A. Well, we go through. We have them make any 
corrections if there are any. We reproof, so we may 
proof one ballot several times depending on what the 
errors or corrections need to be. 

Once everything is in order, then we sign 
off on that ballot. And that lets them know that 
everything is good to go for that ballot. 

Q. When this proofing takes place, is it a 
separate process for absentee ballots and the ballot 
that's displayed on DRE machines or is it the same 
thing? 

A. I don't know. 

Q. Does Kristi Royston conduct the proofing 
process to see that only the voters casting ballots 
on DRE machines can — strike that. 
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Does Kristi Royston proof the ballot that 
appears on DRE voting machines to ensure that voters 
can vote only for the contest that they are eligible 
to vote for? 

A. I'm not really — I'm a little confused. 

MR. STEPHENS: You may need to restate 
the question. 


MR. POWERS: So let's take for 
example — I'm going mark this as 
Plaintiff's Exhibit 10. 

(Plaintiff's Exhibit 10 was marked for 


identification.) 

BY MR. POWERS: 

Q. Ms. Ledford, what is Plaintiff's Exhibit 
A. This is the election summary report for 
presidential preference primary from March 1st of 


10 ? 

the 


2016. 


Q. How many contests are on the election 
summary report for the presidential preference 
primary? 

A. Two. 


Q. What contests are those? 

A. Republican presidential potential candidates 
and Democratic presidential potential candidates. 

Q. Were there any other presidential elections 
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or contests on the ballot on March 1st, 2016? 

A. No. 

Q. Will Gwinnett County be conducting a 
presidential preference primary on March 24, 2020? 

A. Yes. 

Q. And will there be — strike that. 

For the March 24, 2020 presidential primary, 
will the Republican and Democratic primaries be on 
the ballot? 

A. Yes. 

Q. For president? 

A. Yes. 

Q. Will any other races be on the ballot? 

A. Not to my knowledge, but that's a special 
election date, so it's possible that other things can 
appear on that ballot. 

Q. Say Kristi Royston is proofing the ballot 
for a presidential preference primary, is she 
proofing the ballot to ensure, for example, that 
voters casting ballots on DRE machines in a 
Republican primary election will only see the 
Republican candidates on their ballot and not 
Democratic candidates? 

A. Yes. 

Q. How would she go about doing that? 
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A. I don't know her procedure for that. 

Q. Similarly, for any primary elections, she 
would proof the ballots and make sure that voters 
casting a ballot in a particular party's primary 
would only see candidates for that party's primary? 

A. Yes. 

Q. Now, let's talk about some of the logistics 
related to the printing of the paper ballots. 

You decide how many paper absentee ballots 
to print for a particular election? 

A. We don't preprint. It's based on need. So 
if we get in 25 applications that day, we print out 
those 25 ballots and mail those. 

Q. Let's consider provisional ballots. 

How do you decide how many provisional 
ballots to print for a particular election? 

A. Based on history and anticipation of the 
election. So it varies. It could be 1.5 percent. 

It could be one percent of the total active 
registered voters for a polling location. 

Q. How do you disperse those provisional 
ballots between, for example, different early voting 
locations ? 

A. Well, early voting is a little different. 
Early voting gets a standard number. They get, for 
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instance, five of every ballot style. Now, sometimes 
it may only be two. It may be 10. It depends on the 
elections that we're having, but they get every 
ballot style because any voter in the county can go 
to one of our satellite locations. 

Q. Mm-hmm. Roughly — strike that. 

Do you have a sense of how many provisional 
ballots the early voting location centers might 
receive ? 

A. No. 

Q. Now, let's turn to election day. 

How many provisional ballots will be sent to 
particular polling places? 

A. Again, it depends. It's whatever the 
election is and what we feel the anticipation is. It 
could be one percent. It could be three percent. 
There's no — there's no — it's kind of a sliding 
scale depending, again, on the election itself. 

Q. Has there ever been a situation in which a 
polling place has run out of provisional ballots? 

A. No. 

Q. How much does it cost to print paper 
ballots ? 

A. It's 55 cents per page. 

Q. How long does it take for the printer to 
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turn around a print order once you give it to them? 

A. I don't know. 

Q. Does the price of printing paper ballots 
depend on the type of printer that's used? 

A. No. We have Ballot On Demand. We have our 
own printers and it's 55 cents a page regardless. 

Q. Got it. So for Ballot On Demand printers, 
the cost is 55 cents per page? 

A. Correct. 

Q. Do you know what the cost per page is on 
other types of printers? 

A. You're talking from other vendors? 

Q. (Counsel nods head affirmatively.) 

A. No. I don't remember. 

Q. Let's consider the whole absentee ballot 
process sort of from the beginning. 

How long in advance do you need to know what 
the ballot style is to be able to get them printed in 
time to conduct the absentee ballot process? 

A. I'm sorry. Can you say that question again? 

Q. Sure. I'll say it a little more simply. 

How long before an election do you need to 
start preparing for the absentee balloting process? 

A. Well, we vote — whatever the beginning 
deadline is for that because we have — depending on 
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the type of ballot, the — a voter can request a 
ballot 180 days prior to election and by law we have 
to start issuing 40 to 45 days depending upon when 
you can get the ballot ready. 

So we would need to have it a couple of 
weeks — have it ready to go a couple of weeks prior 
to that so that we would have a chance to get it 
loaded and, like you said, to start printing the 
provisional ballots as well. 

Q. So let's -- 

A. Six weeks before election. 

Q. Let's take, for example, the upcoming March 
presidential primary. 

A. Mm-hmm. 

Q. If an election — if the election day itself 
is March 24th, you would need six weeks before that 
to start preparing? 

A. Minimum. 

Q. I think we've touched on this a little bit 
already, but could you help explain to me how the 
Gwinnett County Board of Elections ensures that when 
a voter requests an absentee ballot, that the right 
ballot style is sent to him or her. 

A. Well, with Ballot On Demand, it works with 
the election net system. And so the staff during the 
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day will go in and enter everyone who has requested a 
ballot. They would enter any edits that go with that 
ballot, meaning over 75 military — you know, 
disabled. 

And at some point during the day, they take 
that file and they load it into the ballot printing 
file. And because it's coming directly from ENet, 
that knows what ballot style to print for that voter 
and it even prints out with the voter's name on the 
stub at the top so that when staff members start 
putting that ballot packet together, they know that 
they've got John Brown's absentee application, then 
they have John Brown's ballots and John Brown's 
labels for his ballot packet. 

Q. Have you found this process to be effective 
in terms of making sure that voters are getting the 
right ballot? 

A. Yes. It's been much more efficient than the 
way that we did it previously. 

Q. Do you know what the error rate is with 
respect to voters receiving the wrong ballot style in 
their paper absentee form? 

A. I would have to say it's very minimum — 
very, very minimal because I don't get complaints 
about that usually. 
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Q. Could you describe in a little bit more 
detail for me how the Ballot On Demand system 
interacts with ENet? 

A. I really can't. I'm not the tech person in 
that. I know — I'm the user, so I know it goes from 
here to there, but I don't know the process itself 
because I've never been a part of that. I've seen 
it, but I've never actually done it. 

Q. Sure. And who kind of takes the lead on the 
tech side in terms of that process? 

A. Our voter registration team. 

Q. Mm-hmm. And remind me again who leads the 
voter registration team? 

A. Well, you haven't heard that name. It's 
Shantell Black. 

MR. POWERS: All right. Well, perhaps, 

now would be an okay time to break for 

lunch. 

THE WITNESS: Oh, sure. 

MR. POWERS: Go off the record. 

(Recess from 12:04 p.m. to 1:04 p.m.) 

BY MR. POWERS: 

Q. Before the break, Ms. Ledford, we were 
talking about the DRE machines and the testing that 
was done. And you mentioned that the Gwinnett County 
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Board of Elections tests all the voting machines; is 
that correct? 

A. The ones that are going to be used. 

Q. On election day and during early voting? 

A. Yes. 

Q. The testing of the DRE machines is 
documented by your office; is that correct? 

A. Yes. 

Q. Roughly speaking, how long does it take to 
test a DRE machine? 

A. Depends on the length of the ballot. It's 
takes anywhere from half a minute to a minute to 
maybe five or six. 

Now that we have a Spanish language, it 
takes a little bit longer. It just depends on the 
length of the ballot. It depends on the person 
that's doing the testing, you know, how quick they 
are and different factors. 

Q. Mm-hmm. So with the Spanish language now on 
the ballots, is that range of a minute to five 
minutes, roughly speaking, increased or — 

A. Yeah because it's double. Because whatever 
you do in English, you then have to turn around and 
do in Spanish. It takes us on average four to five 
weeks to do all of our testing. 
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Q. Four to five weeks? 

A. Mm-hmm. 

Q. How many employees are you involved in the 
-- strike that. 

How many employees are part of the testing 
of those machines during the four- to five-week 
period? 

A. Again, it depends on the number that we're 
doing. Usually, it's a minimum of seven to eight 
with a maximum of up to 20 to 25. 

Q. How many times has — strike that. 

Are you aware of any instances in which the 
logic and accuracy testing caught any errors or 
mistakes on the DRE machines? 

A. No. 

Q. If the logic and accuracy testing had caught 
any errors or mistakes on the DRE machines, would you 
have been made aware of that? 

A. Yes. 

Q. Well, do you test the optical scanner in any 
way as part of the logic and accuracy testing of the 
DRE machines? 

A. Yes. I think we discussed that earlier. 

Yes . 

Q. From the beginning of the process, what is 
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the chain of custody for the voting machines as 
they're brought out of storage and tested and put 
into the polling places? 

A. They — there is a form. And whoever 
receives it at the polling location signs that chain 
of custody. They get a copy and then we bring a copy 
back for our records. 

Q. Are there county employees at the individual 
or early voting locations and polling places who 
receive the DRE machines or does it tend to be 
individuals working at, say, the local library or the 
school — 

A. It's whoever the contact at the facility is, 

yeah. 

Q. So let's take a hypothetical where a voting 
machine is tested and is being sent to an elementary 
school. 

Is it generally the policy that the Board of 
Elections is responsible for delivering the voting 
machines to the elementary school? 

A. Correct. 

Q. And then an employee or point of contact 
with the elementary school would sign a form with the 
county official who's delivering the machine to say, 
I'm receiving the DRE machine and taking custody of 
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it ? 

A. Correct. 

Q. How far in advance of the election would 
this change chain of custody occur? 

A. We start delivering the Wednesday prior to 
the election and we finish up on Monday. 

Q. Tell me about the time frame for delivering 
DRE machines to early voting locations. 

A. Those are delivered on the Saturday before 
they start because — or Friday or Saturday depending 
on whether they are starting on Saturday or Sunday. 

Q. Tell me about the chain of custody with 
respect to the memory cards that are eventually 
inserted into the DRE machines. 

A. Well, that — the machine — it's already in 
the machines when they are delivered. When we do the 
L&A testing, they are put in there at that time and 
they are sealed. And then it gets delivered. The 
poll workers don't insert that; that's already done. 

Q. Got it. Make sure I understand it 
correctly. 

Going back to our hypothetical with 
delivering the voting machines to the elementary 
school, is it fair to say it's the policy of the 
Gwinnett Board of Elections when voting machines are 
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delivered to the elementary school, that the memory 
cards are actually inserted in the voting machines at 
the time of delivery? 

A. No. They are inserted during L&A testing. 
That's what you're testing is that memory card. So 
once the testing has been completed, then the unit is 
sealed with a number seal. 

The side door is closed and locked and then 
the unit itself is sealed with a number seal. 

Q. And remind me again. Is that logic and — 

L&A testing, does that L&A testing occur before the 
DRE machines are delivered to the elementary school 
or after they are received by the folks at the 
elementary school? 

A. No. All the L&A is done prior to the 
delivery of the equipment. 

Q. Got it. So let me make sure I understand 
this right. 

When the voting machines are received at the 
elementary school, are the memory cards in the DRE 
machines at that time? 

A. Yes. 

Q. Would that be true both for machines that 
are used for early voting and for DRE machines that 
are used on election day? 
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A. Yes. 

Q. When is the next stage in the process, once 
the machines are delivered, at which point the Board 
of Elections or any election official or poll worker 
is involved, again, with respect to getting the DRE 
machines ready or tested? 

A. Well, everything is already tested prior to 
that. So at six o'clock on election morning, they 
open up the machines and it automatically runs their 
zero tape. And that lets them know that starting on 
that day there have been no votes cast on that unit. 


Q. Is — 







(Witness conferring 

r with counsel 

.) 

MR. POWERS: 

I 'm £ 

30 

>rry. 




THE WITNESS: I'm sorry. 

MR. POWERS: You want to take a second? 

(Discussion ensued off the record.) 

BY MR. POWERS: 

Q. So to go back to the hypothetical we were 
talking about before, the voting machines have been 
received by the elementary school sometime between 
the Wednesday and the Monday before election day? 

A. Mm-hmm. 

Q. And is it fair to say that there's no 
further testing on the DRE machines or the memory 


.APGREPORTING.COM 


APG USA INC. 


(888) 542-5598 



1 

2 

3 

4 

5 

6 

7 

8 

9 

10 

11 

12 

13 

14 

15 

16 

17 

18 

19 

20 

21 

22 

23 

24 

25 


Case l:17-cv-02989-AT Document 441 Filed 07/01/19 Page 316 of 443p age 94 

Curling et al. v. Deposition of 

Raffensperger et al. T. LYNN LEDFORD 6/24/2019 

cards between when they arrive at the polling site 
and when election day opens or before election day 
opens at around 6:00 a.m.? 

A. Correct. 

Q. Now, let's talk about what happens with the 
DRE machines after the election is over. 

Can you please take me through what happens 
after the polls close and — strike that. 

Let's — if you wouldn't mind just telling 
me what happens with the DRE machines once the polls 
close on election day. 

A. Once they close, the poll workers insert a 
supervisor card and they do a code. And that causes 
the unit to start printing out the election results. 

And each unit prints out three results. 

While that's going on simultaneously, numbers are 
being taken off the express poll. 

Everything has a recap sheet. There's a DRE 
recap sheet where the information is record. There's 
an express poll recap sheet where everything is 
recorded. 

When that's done, they will pack all of that 
up. The memory cards are taken out of each unit. 

They are put into a sealed bag. The sealed bag along 
with some other items are brought back to the 
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Elections Office on election night and there they are 
unsealed. 

Q. What happens after they are unsealed? 

A. That's done at the main office and that's 
when we start downloading the election results and 
aggregating it into the GEMS server. 

Q. Ms. Ledford, I'm handing back to you what we 
previously marked for identification as Plaintiff's 
Exhibit 3. 

A. Mm-hmm. 

Q. And what is Plaintiff's Exhibit 3? 

A. It's the number of provisional ballots that 
were tabulated for the November 6, 2018 general 
election. 

Q. And does it say — sorry. 

Does Plaintiff's Exhibit 3 say how many of 
those provisional ballots were counted and partially 
counted and not counted? 

A. Correct. 

Q. How many provisional ballots were not 
counted in the November 2018 election in Gwinnett 
County? 

A. Five hundred and sixty-four. 

Q. How many were partially counted? 

A. One thousand seven hundred eighty-five. 
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Q. And how many were — strike that. 

How many provisional ballots were completely 
counted in Gwinnett County in the November 2018 
election? 

A. Four hundred thirty-one. 

Q. Thank you. 

Ms. Ledford, are all of these provisional 
ballots hand-marked paper ballots? 


A. 

Correct. 







Q. 

And they are 

counted 

using 

optical scanners? 

A. 

Correct. 







Q. 

Ms . Ledford, 

does Gwinnett 

County have an 

nt ake 

process with re 

spect 

to 

receiving election 

omplaints from voters 

7 






A. 

Yes . 








Q. Could you please describe it to me? 

A. It's actually one of the exhibits we 
provided to you. At all of our polling locations we 
provide comments and concerns forms. And that allows 
the voters to get information directly to us. 

Q. Is that Plaintiff's Exhibit 4? 

A. Yes. 

Q. Could you please take me through the — 
well, strike that. 

Does Plaintiff's Exhibit 4 consist of 
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individual voter complaint intake forms filled up by 
voters that — sorry — strike that. 

Plaintiff's Exhibit 4 consists of voter 
complaint intake forms from the November 2018 
election? 

A. Yes. 

Q. Are these forms made available at all 
polling places and early voting locations in Gwinnett 
County? 

A. Yes. 

Q. What are the circumstances in which a voter 
complaint intake form might be filled out? 

A. Anytime they feel like anything was not 
handled appropriately. If they feel like there was a 
problem with their voting machine, if they felt there 
was a problem with an absentee ballot. Some people 
don't like having to cast a provisional ballot. 

It's just a myriad of any — a lot of times 
misinformation that a citizen has received. They'll 
go to a polling place. It confuses them. So then 
they write a letter and provide this information. 

And, of course, then we give them the information 
they need, so they understand. So it's all over the 
place. 

Q. Is it the policy of the Gwinnett County 
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Board of Elections to respond — 

A. It is. 

Q. — to each voter's complaint? 

A. Yes. 

Q. Why don't we go through some of the 
individual — 

(Witness confers with counsel.) 

MR. STEPHENS: We see that there needs 
to be a further redaction of that exhibit to 
comply with statutory requirements. So 
maybe at the end of this deposition we can 
do that. 

MR. POWERS: That works for us and, 
well — what is the category of information 
that we need to be redacting? 

MR. STEPHENS: Phone numbers and — 

THE WITNESS: Some of them have E-mail 
addresses? 

MR. POWERS: Phone numbers and E-mail 
addresses? 

MR. STEPHENS: Yes. 

MR. POWERS: Is it okay if we proceed 
with questioning of the document that will 
not involve any personal identifiable 
information? 
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MR. STEPHENS: Yes, sir. 

MR. POWERS: Great. And, I think, 
redacting the pieces of information 
afterwards is fine. 

MR. STEPHENS: All right. 

BY MR. POWERS: 

Q. I should have asked. Does the Gwinnett 
County Board of Elections also have an E-mail address 
which voters sometimes E-mail with complaints? 

A. Not specifically. We have several different 
E-mail addresses and various things will come through 
all of those but not one specifically for complaints. 

The form itself is on the website and it has 
the information about scanning it back to — I think 
it's the voterregistration@GwinnettCounty.com. So 
they'll scan those back in, but we don't usually get 
just a straight complaint through the E-mail address. 

Q. Got it. 

To make sure I understand it correctly, 
voters will take these voter complaint forms like 
those in Plaintiff's Exhibit 4 with them from the 
polling place. After they vote, they fill them out 
and then they return them essentially per the 
instructions on the form. 

A. Correct. And it's also on the website. So 
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sometimes they'll do that because they can actually 
type the information in rather than handwriting it. 

Q. Got it. 

So if you wouldn't mind taking me through 
the individual voter complaints that you provided in 
Plaintiff's Exhibit 4, again, not providing any of 
the personally identifiable contact information but 
providing the name of the voter and the type of 
problem that they experienced and, perhaps, starting 
with the first page of Plaintiff's Exhibit 4. 

A. You said you wanted the voter's name? 

Q. Yes. 

A. Maury — something — Johnson Mike. I can't 
read their handwriting. 

This particular voter stated that prior to 
her casting her ballot, when she was looking at her 
summary screen, that the card popped out and she did 
not get to push the "cast ballot" button. 

Q. Thank you. 

Could you explain to me what that means in 
terms of it popping out and — yeah, let's start with 
that. 

A. Well, usually, what we have found that it 
means is that the voter did accidentally get close to 
or touched the "cast ballot" button without realizing 
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it because some of those machines are very sensitive. 
Just like your cell phone, you can just hover your 
figure over it and it'll do it. So that is what we 
found out with most of those. 

Q. Let's take it back a step. 

So what kind of — what is the nature of the 
complaint like this with respect to why does it pop 
back out? Is it because the voter -- 

A. Because the "cast ballot" button was touched 
and that means it record the vote. 

Q. Got it. Make sure I understand this 
correctly. 


A. 

Sure. 








Q. 

The voter ha 

s 

hit 

s 

:ome select 

ions, the 


screen pops up and then the vote goes through without 
the voter having an opportunity to review it? 

A. I'm not going to say that because I don't 
know that's the case. 

I know the voter has it in front of them. 

If they lay their hand down or get anywhere near 
that, it will cause it to cast the ballot. So that's 
a voter issue not a machine issue. 

Q. Fair enough. 

How did you find out that hovering your 
finger over the touch screen causes the ballot to be 
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cast ? 

A. Because I've been doing these machines since 
2002. It's through experience. It's not any 
testing. It's not any super-secret squirrel mission 
that we did. It's through use of the equipment. 

That's one of the things that we noticed. It's not 
very often, but it does happen on these machines. 

Q. Has these issues occurred in elections prior 
to 2018? 

A. I'm sure it has. I just don't think it's 
been significant because we don't get a lot of those 
kinds of complaints. They are very, very few. 

Q. Mm-hmm. Got it. 

But you — do you recall receiving 
complaints about this issue in elections prior to 
2018? 

A. I'm sure I have because it's — you know, 
there's just a series of complaints that you get and 
this is just one of the types of complaints that we 
have gotten. But, again, very, very few and far 
between for that particular type. 

Q. Mm-hmm. And say that situation occurs for 
whatever reason a voter — say, I'm a voter and I 
typed in one of my selections wrong and I cast the 
ballot and I'm like, oh, I made a mistake, is there 
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anything that can be done to allow that voter to — 
allow me to recast the ballot or once it's in, it's 
in? 

A. Once it's cast, it's cast. There's no way 
to retrieve a ballot. 

Q. There's no way to retrieve a ballot on the 
DRE machine? 

A. Yeah because it's randomized. We wouldn't 
have any idea which ballot was that voters. 

Q. Got it. Perhaps we could flip to the second 
page of Plaintiff's Exhibit 4. 

A. Sure. When I touch a candidate on the right 
side of the screen, it selects another candidate. 

The right side of the screen is faulty on the third 
to the last machine on the right side of the front 
section of the voting booth. The machine made a 
selection for me. 

Q. What is the name of the voter? 

A. Oh, Archel Bernard. 

Q. Is essentially what Mr. Bernard saying is 
that he tried to vote for candidate X and instead 
candidate Y's name lights up as having been selected? 

A. Mm-hmm. I think so, yes. 

Q. How does that kind of problem occur? 

A. I have no idea because I don't know — 
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without being there, I don't know if the voter 
touched something. If he had a big finger and put 
his whole finger down and it registered one instead 
of the other. I don't know if he had something on 
him that touched the screen. 

You know, without having been there, we 
don't know. And that's, you know, another reason why 
you have that review screen at the end, so if 
something is incorrect, they can go back and correct 
it before they cast their ballot. Like I said, it 
would be pure speculation to guess that was what 
caused that. 

Q. Has this kind of issue cropped up in 
elections before the November 2018 election? 

A. Usually only in general elections when 
there's parties involved — 

Q. And — 

A. — which lead you to believe it's a voter 
issue not a machine issue. 

Q. Mm-hmm. Are you aware of any instances in 
which you or a poll worker has seen this issue occur 
where you tap one candidate's name and then a 
different candidate's name lights up? 

A. I have never seen it. I assume the poll 
officials have since they are in the field with the 
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voters. And if we get those phone calls, usually 
that's what we determine is we will have them walk 
the voter back through what they did. And oftentimes 
it was — like I said, something touched or whatever. 
It didn't flip the vote. 

Q. Just to make sure I understand, so poll 
officials have called in to the Board of Elections 
and said, Hey, I'm having an issue with a voter and a 
machine where ballot flipping is occurring? 

A. No. They don't use the word "ballot 
flipping" because that's not what it is. 

Q. Sorry, sorry. My words. 

A. Something is different with the machine and 
we can't tell if it's the voter or the machine. And 
what we usually find out is it's the voter and not 
the machine. 

Q. Got it. Thank you. 

A. Just make sure you get that correct. 

Q. I appreciate that. 

So have there been at least some instances 
where the issue was not the voter? 

A. Not to my knowledge. 

Q. Could we please turn to the third page of 
Plaintiff's Exhibit 4? 

A. Cassandra Smith. 
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Q. What is the nature of Cassandra Smith's 
complaint ? 

A. Hers is similar to the first one, that she 
was on her voting summary screen and the card popped 
out before she intended for it to. 

Q. So this is the same problem where the voter 
is saying that — 

A. It is. 

Q. The voter is saying that the vote ended up 
getting cast without her — 

A. — touching a ballot. 

Q. — initiating it? 

A. Yes. 

Q. Let's turn to the next page. 

A. Patrice Tillman. This is where she said 
she's touching the Democratic candidate, but the 
Republican's name came up instead. And she was shown 
how to unselect and reselect the vote. 

And that was like very similar to what we 
see all the time. And because the Democratic 
candidate is below the Republican candidate, when you 
go to touch it, if you're a female and you have a 
long fingernail or you don't press it in the right 
spot, it will pick up whichever one it reads the most 
of. So it would have picked up the Republican 
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candidate. 

Q. Got it. 

The fat finger issue? 

A. Yes. 

Q. Mm-hmm. Could we turn to the next page of 
Plaintiff's Exhibit 4? 

A. James Lamb. Similar issue to the first — 
the first one where he was on his summary screen and 
he says that it cast the vote. He saw the — what's 
he calling it — the sand timer, the timer thing. I 
can't think of what it's called. 

MR. STEPHENS: The hourglass? 

THE WITNESS: The hourglass. I'm sorry. 

BY MR. POWERS: 

Q. If you wouldn't mind taking me through — 
was it Mr. Lamb's — 

A. Yes. 

Q. — complaint and how an hourglass would show 

up? 

A. When you touch the screen, just like you do 
on your computer, as it's going through thinking, it 
has an hourglass and it just rotates. It doesn't do 
anything. It's just there to show you that it's 
thinking. 

And so he saw the hourglass come up and 
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thought that he still had time. But in actuality, he 
probably had already touched "cast ballot" at that 
point one way or the other, whether accidentally or 
on purpose. 

Q. Do these machines, DRE machines ever freeze? 

A. Yes. 

Q. Under what circumstances does a DRE machine 
freeze? 

A. I couldn't tell you. It's random. There's 
no — there's not anything special. It's just from 
time to time, it's pieces of electronic equipment and 
it will freeze up. 

Q. Can a DRE machine freeze while a voter is in 
the course of making selections? 

A. Yes. 

Q. What's the procedure that Gwinnett County 
uses in the event a DRE machine freezes while a voter 
is making selection? 

A. They will turn the machine off and turn it 
back on because that's how the card pops out. And 
then they can look and see if there were any votes — 
you know, if the voter cast their ballot, which 
usually if it's frozen, it has not happened, in which 
case they will be issued a second card. 

They'll work with that machine. You know, 
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they'll do a couple of things. And if it does not 
come back up — or correctly, then they close that 
machine down and it's not used the rest of the day. 

Q. Got it. 

Could it happen that a machine freezes while 
the voter is maybe almost finished casting the ballot 
and then during the restarting process the vote is 
actually cast and goes through? 

A. Not to my knowledge. 

Q. Could we please turn to the next page of 
Exhibit 4? 

A. Rebecca Duncan. Same thing, machine casted 
my ballot while I was reviewing my ballot. 

Q. Got it. 

So this is the same as some of the 
complaints we've seen before. 

And what about the next complaint? 

A. Melody Jordan. And she voted — voted no — 
let's see. Voted no — she was having a problem with 
one of the amendment questions. She said she was 
voting on the issue. She was told to push summary 
and it closed the voting machine down which meant 
that it cast her ballot. 

I have no idea if my ballot will be counted. 
The machine was closed down so no one else would have 
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to experience the total disappointment. 

Q. So does that mean that the machine was taken 
offline and no longer used afterwards? 

A. Correct. And there may not have been 
anything wrong with it. It's just what the poll 
official decided to do based on this. I don't know, 
so. . . 

Q. Great. You can turn to the next page. 

A. Sue Nash. Same thing, it's on the summary 
screen and it cast her ballot. 


Q. 

Can we 

turn to 

the next page? 


A. 

Mm-hmm. 

I can 1 

't read this one. 

This one 


sounds like a bad memory card. It said — this is 
from the poll official talking about a voter and said 
When they put the card in, it came out and said it 
was invalid. The count showed that the voter had not 
cast their ballot, so they were reissued another 
ballot and they voted on another machine. 

Q. Can you help explain what happened with the 
memory card? Was it a Ms. Lewis — was it then — 
what's the name of the poll worker? 

A. Yes. Occasionally, you will have a memory 
card — a memory card? I apologize — a voter access 
card that has the little chip on it just like your 
credit card does. And if that gets very, very 


.APGREPORTING.COM 


APG USA INC. 


(888) 542-5598 



1 

2 

3 

4 

5 

6 

7 

8 

9 

10 

11 

12 

13 

14 

15 

16 

17 

18 

19 

20 

21 

22 

23 

24 

25 


Case l:17-cv-02989-AT Document 441 Filed 07/01/19 Page 333 of 4^ ge m 

Curling et al. v. Deposition of 

Raffensperger et al. T. LYNN LEDFORD 6/24/2019 

dirty — we try to get them to wipe them off multiple 
times throughout the day, but there could be just 
something has gone bad with that card. 

And, oftentimes, if you put that in a 
machine, it will come and tell you it's invalid. And 
so when that happens, it won't cast a ballot. So the 
voter has to be issued a second card. And sometimes 
they'll vote on the same machine and sometimes they 
want to go to a different machine. It's totally up 
to a voter. 

Q. How does the poll worker ascertain in a 
situation like that, whether or not a vote was 
actually cast? 

A. They have to stop voting. And they go 
around and take a count off of each of the machines. 
And then they take a count of the number list of 
voters off of the express poll and they match those 
numbers up. If they are one less or one over, then 
they determine the voter either did or did not cast 
that ballot. 

Q. That seems like a — strike that. 

So if we're at a polling place where there's 
a lot of machines, am I getting it right, that you 
have to take — or stop voting at all of the other 
machines and essentially count all of the ballots 


.APGREPORTING.COM 


APG USA INC. 


(888) 542-5598 



1 

2 

3 

4 

5 

6 

7 

8 

9 

10 

11 

12 

13 

14 

15 

16 

17 

18 

19 

20 

21 

22 

23 

24 

25 


Case l:17-cv-02989-AT Document 441 Filed 07/01/19 Page 334 of 4^ ge 112 

Curling et al. v. Deposition of 

Raffensperger et al. T. LYNN LEDFORD 6/24/2019 

that have been cast at the precinct that day? 

A. The number, yes. And they have to do that 
on — hourly anyway. And so it's not like they have 
to start — you know, if someone casts that — if 
that happens at five o'clock in the afternoon, 
they're really just reconciling from their four 
o'clock number on, not all throughout the day. 

Q. Got it. Got it. 

That process — strike that. 

How often does that happen on a given 

election? 

A. I couldn't tell you. Sometimes we know 
about it and sometimes we don't. So we don't know. 

Q. Mm-hmm. What is the Gwinnett County Board 
of Elections' retention policy with respect to 
complaint intake forms? 

A. Two years, 24 months. And there's no — 
that is just a county thing because we keep 
everything 24 months by law, so we just include that 
in that. 

Q. So if there were complaint intake forms from 
prior elections, say the November 2016 election, that 
would have been disposed of 24 months after they had 
been received? 

A. Correct. 
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Q. Have you received similar complaints about 
DRE voting machines and elections prior to 2018? 

A. Yes. 

Q. What kind of investigation do you do to try 
to figure out what the — what the problems were and 
what can be done about it? 

A. Well, if the machine does not continue to 
have problems, there's nothing to investigate. We 
have no way of doing forensics on machines and that's 
not our job. 

If another voter — and the poll officials 
pay attention. If another voter has a problem with 
the same machine, then they'll call us and say, Hey, 
we've got this. And we would take that out of 
service. We wouldn't allow it to be used the rest of 
the day. 

Q. You mentioned that the County doesn't have 
an ability to conduct a forensic analysis of the 
machines ? 

A. Correct. 

Q. Have you had any situations where you 
thought a forensic analysis of a particular machine 
might be necessary? 

A. No. If we take a machine out of service and 
we get it back, it gets a ticket put on it and it 


.APGREPORTING.COM 


APG USA INC. 


(888) 542-5598 



1 

2 

3 

4 

5 

6 

7 

8 

9 

10 

11 

12 

13 

14 

15 

16 

17 

18 

19 

20 

21 

22 

23 

24 

25 


Case l:17-cv-02989-AT Document 441 Filed 07/01/19 Page 336 of 4^ ge 114 

Curling et al. v. Deposition of 

Raffensperger et al. T. LYNN LEDFORD 6/24/2019 

goes straight back to the vender. And they look at 
it. If there's anything wrong with it, they fix it, 
correct it, retest it. 

It comes back. It gets tested by Ken -- 
well, it used to be Kennesaw State, now the State. 

It gets recertified and then gets sent back to the 
County. 

Q. Got it. And how frequently do you send 
machines back to the vendor? 

A. We send them every year, but the number is 
relatively low. Maybe 10, if it's that many. 

Q. Did you send roughly 10 machines back to the 
vendor after the 2018 election? 

A. I don't know. 

Q. Could would you say 10 is a relatively 
typical number — 

A. Ten or less, yes. 

Q. Who is the vendor that you're sending the 
machines to for maintenance? 

A. ES&S. 

Q. When you send a machine to ES&S, do they 
send you back the same machine or do they send you a 
new one? 

A. It depends. Ninety-nine point nine percent 
of the time, it's the same machine because it's 
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usually not a critical error. It's — you know, 
sometimes the batteries just need replacing. 

Although it still may show 98 or 50 percent or 
whatever, sometimes the battery on those will just 
completely die. And we don't replace the batteries; 
they do that. 

We try to do that on a routine basis, but, 
occasionally, you will have — just like we said, 
with the memory card battery, you'll have a battery 
there that might have something wrong with it. 

But usually we get back the same — I only 
know of maybe — maybe two or three times that 
they've actually replaced a machine. It's usually 
just something very minor that they can correct with 
the machine itself. 

Q. In the two or three times that they have 
replaced the machine, has the vender ES&S ever told 
you why they replaced that? 

A. Well, usually, that's not — the screen died 
or it gets — has like wavy lines on it. So they 
have to replace those — those — that's why I said. 
It's not ever anything critical. It's always 
something along that magnitude. There's not a 
disconnect in the wiring or something like that. 

Q. You mentioned the batteries sometimes die on 
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the DRE voting machines? 

A. Mm-hmm, even though they are charged every 
three months. Yes. 

Q. This is probably a dumb question, but who 
does the charging of the DRE machines? 

A. The prep center staff which is Kelvin, 

Demond and Tiffany. 

Q. Is it like there's a charging station — 

A. No. We have what's called pigtail. So we 
have — if you were to see our warehouse, all of our 
equipment is taking up about three-fourths of it. 

And we have electric that comes down, pulls 
down from the top and so they can plug in and charge 
a whole group at one time. And every three months 
that group one will get shifted. So they're 
charging. They'll get shifted to the back. The next 
group will move up and they'll get — and so they 
have a routine that they do the charging on those. 

Q. Got it. 

Do you have a team of county employees who 
are moving the machines back and forth or is it the 
charging outlets that are being moved? 

A. It's the outlets at the top. They are being 
pulled down and being put into the machines. 

Q. Given the — strike that. 
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When you receive complaints like these from 
voters, have you referred any to the Secretary of 
State's Office for their investigation? 

A. Because it doesn't usually have anything to 
do with them, they don't have anything to do with the 
equipment at that stage. That's a problem with the 
piece. And so it guess to the vendor and not to the 
State. 

Q. Have you spoken with elections directors 
from other counties or undertaken other steps to try 
to minimize voter complaints about their experience 
with casting ballots on DRE machines? 

A. No. I don't think you can minimize it. 

It's a voter issue. It's not a machine issue. So 
it's a voter education thing. 

So we try and — there's — I can't think 
what they're called. There's little placards in the 
booth. If people don't read them, then there's not 
anything we can do about that. 

When the machines were first rolled out, we 
had a big voter education effort through the 
Secretary of State's Office. And beyond that, 
there's not anything that we've been able to 
determine. 

And like I said, when you look at the number 
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of votes cast — I mean, in this one election we had 
338,125 and we've got, you know, five complaints. 

That doesn't minimize these five complaints by any 
means, but that lets me know that most everybody 
understands how to use the equipment. It's just a 
few. 

And it may or may not have been their error, 
but if the machine continues, we take it out of 
service. We send it in. If it doesn't have any more 
errors throughout the day, then you assume it's a 
voter issue. 

Q. Have you done any kind of voter outreach or 
survey to see if voter issues with the machines are 
more widespread than the complaints that have come in 
through these intake forms? 

A. No. We — because, you know, if the voter 
or the poll official will usually let us know if 
there's issues. And we just got an outreach team two 
years ago. And we just now started doing a lot of 
going out into — you know, taking the machines and 
doing — again, beginning to do demos and things like 
that. 

And, of course, that will ramp up with 
whatever system the Secretary Raffensperger chooses 
for us hopefully in the next couple of weeks. 
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Q. Let's talk a little bit about the mechanics 
by which the votes cast on DRE machines are counted. 

Can you tell me about the process from the 
point after which the memory cards are taken out of 
the DRE machines at once polls have closed? 

A. Mm-hmm. Once they've ran their tapes, they 
remove the memory card. They are placed into a 
sealed bag. They come into the Elections Office with 
some other specific supplies that they have to turn 
in on election night. 

They go into another room where they were 
unsealed. They're counted. And then they're put in 
mail trays in what we call "election central." And 
then they're taken by precinct. And information is 
uploaded into the GEMS server where it is aggregated 
to produce the election results. 

Q. After that, are any kinds of reports 
generated? 

A. Yes. This five-page report — five-column 
report — I'm sorry. Five-column report card, it's 
printed out before we leave at night. We have to 
provide that to the Secretary of State's Office. 

Q. You're referring now to Plaintiff's 
Exhibit 9? 

A. Yes. 
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Q. Where are these reports being generated 

from? 

A. From GEMS. 

Q. Are the reports that are generated public 
records ? 

A. They are. 

Q. Are there any reports from the GEMS database 
that you know of that are not public records? 

A. I couldn't answer that. 

Q. What other reports outside of the 
statements — statement of votes cast do you print 
from the GEMS database? 

A. I don't know. 

Oh, write-in report. I apologize. We do 
produce a write-in report. 

Q. Thank you. 

Earlier we talked about complaints that come 
from voters with respect to situations where they say 
the ballot was cast without them initiating it, as 
well as situations where they say they voted for — 
try to vote for one candidate but another candidate's 
name lights up. 

Are you aware of having received other 
complaints from voters with respect to using DRE 
machines ? 
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A. 

No . 

In a general rule, 

they 

like them. 

Q. 

Are 

you aware of voters 

ever 

being issued 


incorrect ballots when voting in person on a 
DRE machine? 

A. Yes. 

Q. Could you please tell me about that? 

A. Most oftentimes that happens during early 
voting when they have every ballot style to choose 
from. And — but when the voter notices it, they 
raise their hand and the poll official will eject 
that card out of the DRE without — you know, it does 
not cast votes at that point and they are reissued 
the correct ballot style. 

Q. Are there — strike that. 

Could there be circumstances in which — 
strike that. 

Can anyone other than the voter ascertain 
whether or not he or she has been issued an incorrect 
ballot? 

A. Just the poll official, but they are 
issued — you have Election Net that tells the poll 
official what ballot style to code for that voter. 

And then they have an express poll that has all of 
that on it. 

So, occasionally, they will — you know, 
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especially in a primary where you have two different 
sets of Democrat and Republican. That's most of the 
complaint. It's not necessarily the wrong ballot 
style; it's the wrong choice. Either they wanted 
Democrat and they got Republican or they wanted 
Republican and they got Democrat. 

And voters notice that pretty quickly when 
they don't see Donald Duck's name; they see Mickey 
Mouse pop up there. So when that happens, like I 
say, we get that the card back and then we reissue 
them the correct card. 

Q. How does it happen that they're given the 
wrong ballot? 

A. Just like I said, they just touch the wrong 
thing on the express poll. 

Q. In terms of like which party, for example — 

A. Correct. They'll be at the right precinct 
and the right district combo, but they'll touch "R" 
instead of "D," so it puts those Republican or 
Democrat — you know, whichever the case may be. 

Q. And is that the poll worker who's hitting 
the wrong — 

A. Correct, yes. 

Q. If a voter gets "D" instead of "R" and votes 
in the wrong party's primary and says — actually, 
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strike that. 

Let's take a hypothetical where a voter 
votes in the wrong party's primary and actually casts 
a ballot and comes back and says, I'm sorry, I voted 
in the wrong party's primary, can I get a new ballot, 
what happens next? 

A. They can't — once you touch "cast ballot," 
you have casted your ballot. 

Q. We touched on this a little bit before, but 
could you please describe the policies and procedures 
currently in place to make sure that each voter's 
ballot remains secret? 

A. DRE? Absentee by mail? Provisional? 

Q. Let's take DRE machines. 

A. Okay. Well, obviously, nobody but the voter 
sees their ballot. So once they are given their card 
and they put it into the machine, it pulls up their 
ballot — which it only pulls up their ballot. 

They go through and they make their 
selections. They touch "cast ballot." When they do, 
the machine — the machine — they yellow card pops 
out. The card has nothing on it at that point; it's 
reused throughout that day. 

Absentee ballots, once they are received in 
the office, once they are certified and good to be 
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counted, they are actually in the prep center, which 
is a secured location. And then within that secured 
location they are kept in what's called ballot 
vaults. 

Each ballot vault has its own key lock code 
and that code is changed between every election. And 
then on election night when those ballots are opened, 
the white envelope is sealed inside the yellow. The 
yellow has the voter's name. One person splits that. 
They take the Wite-Out ® ®. They separate it from 
the yellow, but then the next person splits that and 
takes it out. So the voter's name is two people away 
from knowing who that voter was. 

The provisional ballot, the voter loses 
their anonymity because they're having to vote a 
provisional ballot. So we know that — you know, 
because of research we have to do, we have to have 
specific information. 

And then the same thing, they are kept 
secured from the time we start, you know, working on 
those until we run them to be certified on 
election — I mean on certification day. 

Q. Ms. Ledford, you had mentioned before that 
when a voter casts a ballot on a DRE machine, that it 
essentially could not be pulled back out under any 
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circumstances; is that correct? 

A. To my knowledge, it can't. 

Q. Has the policy and procedure always been in 
place? 

A. For what? 

Q. Fair enough. 

Has it always been the policy or procedure 
of the Gwinnett County Board of Elections that when a 
voter casts a ballot on a DRE machine during early 
voting, that that ballot cannot be pulled back out 
under any circumstances, including in cases of double 
voting? 

A. To my knowledge, no, it cannot. 

Q. Was that the case even prior to 2010? 

A. Yes. 

Q. Are you aware of situations in which ballots 
have been pulled out in other counties in situations 
where a voter had double voted? 

A. No. 

MR. POWERS: I think now would be a good 

time to take a brief break. 

(Recess from 2:03 p.m. to 2:19 p.m.) 

BY MR. POWERS: 

Q. I wanted to ask if you're aware of there 
being calibration issues with respect to DRE voting 


.APGREPORTING.COM 


APG USA INC. 


(888) 542-5598 



1 

2 

3 

4 

5 

6 

7 

8 

9 

10 

11 

12 

13 

14 

15 

16 

17 

18 

19 

20 

21 

22 

23 

24 

25 


Case l:17-cv-02989-AT Document 441 Filed 07/01/19 Page 348 of 4^ ge 12 6 

Curling et al. v. Deposition of 

Raffensperger et al. T. LYNN LEDFORD 6/24/2019 

machines? In particular, does it ever happen that a 
DRE voting machine is not calibrated correctly? 

A. No. It's not that it's not calibrated 
correctly. It's calibrated correctly, but when it's 
delivered and all the shifting in the move, 
occasionally, we have had to recalibrate. But that's 
something that's determined pretty quickly when the 
poll opens. 

The poll official opens it up and starts it. 
If they see something or the first voter comes up and 
says, Hey, this is not registering correctly, that's 
one of the things that they look at is the 
calibration. 

Q. Can you explain to me what happens with 
respect to — I guess you said machines getting moved 
around that causes this issue to pop up? 

A. Yeah. When you do L&A testing, you take the 
machine off of a shelf and you put it on a table. 

You do the L&A. You close the machine up. 

You seal it. It gets put onto a cart. Then the cart 
gets rolled out to the loading dock. It gets taken 
off the cart, put on the truck. It rides around in 
the truck. It gets where it goes. It's taken off 
the truck and moved into the polling location. 

And so that's a lot of jostling and moving 
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around. We have that, but we don't have it very 
often. I mean, we've had it, so I know it exists. 

Q. Did this issue pop up in the November 2018 
election? 

A. Not to my knowledge. I don't know. 

Q. Did it pop up in the November 2016 election? 

A. I would not know that unless it were a 
widespread issue. If it were one or two like the 
things we saw here, I would not know about it. 

Q. So it's the moving of the machines on the 
trucks and the transportation that causes — 

A. That's what we've been told by ES&S. 

Q. What ends up being displayed on the machine 
that causes the poll worker or the voter to say, Oh, 
there's something in this here? 

A. Usually, it's just when they touch it and it 
doesn't — like, for instance, some of these where 
they don't register correctly, that could have been 
an issue, that it lost its calibration. That's 
really how that's discovered because there's not 
anything that you do necessarily at the poll. Like I 
said, it's any type of testing phase that would make 
that apparent. 

Q. When you were pointing to here when giving 
your answer prior, were you referring to the voter 
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complaints — 


A. 

Yes . 


Q. 

— that were in 

— what was Plaintiff's 

Exhibit 

— 


A. 

Four. 


Q. 

— 4. 


A. 

Yeah. 


Q. 

This issue will 

actually occur on election 

day; is 

that correct? 


A. 

Yes . 



Q. What's the County Board of Elections policy 
with respect to fixing the problem? 

A. The prep center staff will walk the poll 
official through recalibrating. 

Q. Remind me again who the prep center staff 
would be. 

A. Kelvin, Shantell — I'm sorry. Kelvin, 
Demond and Tiffany. 

Q. Thank you. 

The poll worker will then recalibrate the 
machine themselves? 

A. Mm-hmm, yes. 

Q. If the poll worker isn't able to recalibrate 
the machine, what happens next? 

A. The machine closes down and it's tagged for 
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repair. 

Q. Has that ever happened? 

A. I don't know for sure. 

Q. Okay. Earlier you mentioned a retention 
period of 24 months? 

A. Mm-hmm, yes. 

Q. Does the Gwinnett County Board of Elections 
preserve DRE memory card data for 24 months? 

A. I don't know. 

Q. I think we've talked quite a bit 
proofing the ballot. I want to talk brie 
proofing the GEMS database. 

First, does the County Board of 
proof the GEMS database? 

A. I don't know. That would be my deputy 
director. 

Q. Kristi Royston? 

A. (Witness nods head affirmatively.) 

Q. Is Ms. Royston the person on the Gwinnett 
County Board of Elections staff most knowledgeable of 
the GEMS database? 

A. Actually, that would be Kelvin Williams. 

Q. What are the responsibilities that Kelvin 
Williams and Kristi Royston have respectively with 
respect to the GEMS database? 


about 
fly about 

Elections 
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A. Well, Kristi is the deputy director, so she 
just fills in where she's needed. She has done some 
stuff in GEMS. Like I said, I'm not exactly sure how 
she and Kelvin have divided up their duties with 
that. 

Kelvin is the elections coordinator. So 
anything and everything that has to do with elections 
falls under Kelvin. And Kelvin is the one who on 
election nights sits in front of the machine. And, 
you know, he has a group of folks and they get to 
upload from the memory card from the polls into the 
unit. He is one that does all the reporting at the 
end and anything to do with the GEMS server really is 
under Kelvin. 

Q. What are Kristi Royston's primary 
responsibilities? 

A. In regard to GEMS? 

Q. Generally speaking. 

A. Like I said, she's the elections director. 

So she assists me with making sure everything falls 
into place and that we meet deadlines and statutory 
requirements. She just helps me oversee the process, 
all voter registration election processes. 

MR. POWERS: Thank you. 

I would like to turn to Plaintiff's 
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Exhibit 7 and kind of go through — sorry, a 
couple of different pages here. If we could 
turn first to the bulletin on July 26, 2018, 

and if you could please take a second to 
read it. 

(Witness reviews document.) 

BY MR. POWERS: 

Q. Again, we're talking about Plaintiff's 
Exhibit 7. 

Could you briefly describe the July 26, 2018 

bulletin? 

A. The Secretary of State's Office was letting 
the counties know that there was some suspected 
Russian activity into the websites in Georgia, Iowa 
and Florida. 

Q. Did you receive this bulletin? 

A. Yes. 

Q. What action did you take in response to 
receiving the July 26, 2018 bulletin? 

A. We requested the onsite security assessment 
from DHA. 

Q. Did that onsite DHA assessment take place? 

A. It did. 

Q. Roughly when was that? 

A. I don't remember. It was several months 


.APGREPORTING.COM 


APG USA INC. 


(888) 542-5598 



1 

2 

3 

4 

5 

6 

7 

8 

9 

10 

11 

12 

13 

14 

15 

16 

17 

18 

19 

20 

21 

22 

23 

24 

25 


Case l:17-cv-02989-AT Document 441 Filed 07/01/19 Page 354 of 4^ ge 132 

Curling et al. v. Deposition of 

Raffensperger et al. T. LYNN LEDFORD 6/24/2019 

after this. 

Q. What was the outcome of that? 

A. We have not gotten our report — oh — 

MR. TYSON: That's okay. 

BY MR. POWERS: 

Q. Have you taken any other actions beyond 
requesting the DHA assessment? 

A. A security system was added to our front — 
to our office. I won't say the front, the whole 
office. 

A camera system — we're getting ready to do 
a remodel and they are getting ready to include a 
camera system as well as far as physical security. 

And that was just in conversation with the DHA; that 
was the first thing that he said. 

Q. What is the purpose of the security camera 
in the front office? 

A. To be sure and watch all of the activities, 
including anything that's going on in the prep 
center; to make sure we don't have people coming in 
from outside who aren't county employees or 
authorized to be back there is some way, shape or 
form. 

And then what we call election central, 
which is where the GEMS server is held currently, it 
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is behind a double locked door. Only full-time 
employees have access to that and we will continue 
that. But the monitors will also be watching down 
that hallway to watch that door to see who's coming 
and going in and out of that room. 

Q. Got it. 

Did the Gwinnett County Board of Elections 
take any other actions after receiving the July 26, 
2018 bulletin? 

A. No. 

Q. Now, I'd like to ask you to turn to an 
October 2nd, 2018 unclassified document from the 
Department of Homeland Security. 

A. Mm-hmm. 

Q. And, in particular, if you wouldn't mind 
reading the — well, first let me go back. 

What's the title of the unclassified 
document from the Department of Homeland Security? 

A. A Georgia Perspective on Threats to the 2018 
U.S. Elections. 

Q. What is the — strike that. 

Did you receive this unclassified document 
from the Department of Homeland Security? 

A. No. This came from the Secretary of State's 
Office. 
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Q. Fair enough. Let me ask a better question. 
Did the Georgia Secretary of State send this 
document to you? 

A. I believe so. 

(Witness perusing document.) 

MR. POWERS: Take your time. 

THE WITNESS: Yeah, I think it was 
attached to an OEB. Yeah, it was -- yes, it 
was an attachment to an OEB, to an official 
election bulletin. 

BY MR. POWERS: 


Q. ] 

[ should probably g 

[O 

back. 



l 

low do you re 

ceive 

official election 

bulletins 

from the Geo 

rgia S 

iec 

retary of 

State? 


A. Through E-mail. 

Q. Which official election bulletin from the 
Georgia Secretary of State was this unclassified 
Department of Homeland Security document attached to? 

A. I don't know. I thought I printed them in 
the order that they were on there. So this was — 
that one's August. 

I don't know. It would have been just an — 
it would have been, like I said, something like this 
kind of explaining to us what it was and then it 
would have had attachments. And so I just printed 
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the attachments. 

Q. Got it. 

If we could go back to the page that we 
labeled, A Georgia Perspective. 

A. Mm-hmm. 

Q. What does the Department of Homeland 
Security document say in general terms? 

A. That they are worried about potential 
influence into the voter registration and/or election 
system for the state of Georgia. 

Q. What's the date on the document? 

A. October 2nd, 2018. 

Q. Are there any specific threats listed in the 
document ? 

A. Yes. 

Q. Could you please read them off? 

A. All of them? 

Q. Yes, please. 

A. All right. Unauthorized entry to the 
polling places or long-term storage facilities and 
voting facilities used to store election and voting 
system infrastructure. 

Incident of spear phishing or attempts to 
hack voter registration systems, such as Department 
of Motor Vehicles or other organizations used to 
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register voters. 

Attempts to access information technology, 

IT infrastructure used to manage elections, display 
results or for counting or certifying results. 

Hacking or spear phishing attempts against 
the E-mails or social media accounts of election 
officials, staff or volunteers. 

Hacking attempts of political party 
headquarters or candidates' IT systems or websites. 

Attempts to hack, alter or disrupt 
infrastructure used to process absentee ballots or 
attempts to interfere with votes send through the 
U.S. postal service. 

Compromise of any networks or system by 
cyber actors, including tactics, techniques and 
procedures along with the impact observed on election 
related systems. 

Any unexplained disruptions at polling 
places or training locations which block or limit 
voter turnout. This may include social media 
messages or robocalls falsely reporting changed or 
closed polling locations or physical incidents at 
polling location, including distribution of false 
information. 

Disinformation efforts to shut down 
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government websites to foment social unrest and 
reduce voter turnout. 

Impacts to critical infrastructure that 
limit access to polling stations such as power 
outages, Internet, telephone, cellular and 
transportation, traffic control outages. 

Q. Thank you. 

Are you aware of any of these potential 
threats occurring in Gwinnett County? 

A. No. 

Q. Elsewhere in Georgia? 

A. I couldn't speculate. I don't know. 

(Plaintiff's Exhibit 11 was marked for 

identification.) 

BY MR. POWERS: 

Q. I'm handing you what I've marked for 
identification as Plaintiff's Exhibit 11. 

Ms. Ledford, what is Plaintiff's Exhibit 11? 

A. You tell me. Something from the — Brian 
Newby from the EAC about information provided to the 
EAC by the FBI — from the FBI, a document that 
provides some information about IP addresses that 
recommend election officials scan their systems to 
ensure these IP addresses are not — 

(Reporter requests that witness slow 
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down.) 

THE WITNESS: For election officials to 
scan their systems to ensure these IP 
addresses are not accessing election 
systems. 

BY MR. POWERS: 

Q. Is there an attachment to — strike that. 

In Plaintiff's Exhibit 11, it starts with an 
E-mail sent on August 23rd, 2016; correct? 

A. Yes. 

Q. There's an attachment to that E-mail called 
BOE flash August 2016 final dot PDF. 

MR. TYSON: Object just on foundation. 

I don't think we've established she knows 
what this E-mail is or that this was the 
attachment. I understand it's all put 
together as one, but maybe you want to 
establish that she's seen or knows what this 
is . 

BY MR. POWERS: 

Q. Let's turn to the third page. And this is 
labeled FBI flash. 

Have you seen this document before? 

A. I don't remember. 

Q. It is possible that you've received this 
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document ? 

A. It could be. 

Q. Have you received documents like these in 
the past? 

A. Not that say "FBI flash." Not to my 
knowledge. 

Q. What kinds of documents have you received? 

A. The ones like we just saw in Exhibit 7. 

Q. The document from the Department of Homeland 
Security? 

A. Correct. 

Q. Are there instructions that you received 
from the Secretary of State with respect to promoting 
election security in and around the 2018 election? 

A. I don't remember. 

Q. Aside from the security assessment and 
installing the camera in the Board of Elections, are 
there any steps that the Gwinnett County Board of 
Elections took to further promote the security of the 
2018 elections? 

A. Not to my knowledge. 

Q. Are you aware of any attempted intrusions 
into the Gwinnett County Board of Elections' website 
or electoral infrastructure? 

A. No. 
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Q. I'd like to switch gears and talk to you a 
little about Plaintiff's Exhibit 6. 

In particular, who sent Plaintiff's Exhibit 


6 to you? 


A. I don't remember. It would have been either 
for — oh, Center for Elections Systems so Kennesaw 
State University. 

Q. Do you know when this was sent to you? 

A. No. I don't remember. 

Q. What did you do with Plaintiff's Exhibit 6 
after you received it? 

A. Gave it to Kelvin Williams or Kristi 
Royston. 

Q. Do you know what follow-up actions they 

took? 


A. 

Q. 

A. 

the GEMS 


Whatever it says to do in here. 

What is that? 

It's how to export the election results from 
server to the state election night reporting 


system. 

Q. Thank you. If I could have it back for a 
second. 


If I could ask you to turn to the 
introduction page on the PowerPoint slide in 
Plaintiff's Exhibit 6. If you could just read off 
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what that page says. 

A. The SOS office has created a secure system 
to facilitate the transition of files needed for the 
election equipment. County election officials will 
now receive their election files by remotely 
accessing and SOS server and downloading their files 
from this server to their local computer. 

Your liaison will assist you in downloading 
the required software and establishing the connection 
to the SOS server. The following slides are an 
overview of the file transfer process once the 
initial setup has taken place. Please contact us if 
you have any questions regarding the transferring of 
files processed. 

Q. Is this something that Kristi and Kelvin 
would have worked with the Secretary of State's 
Office? 

A. Correct. 

Q. Do you know who the liaison is with the 
Georgia Secretary of State's Office? 

A. It's changed several times over the last 
couple of years. Since I don't know when we got 
this, I don't know who it would have been at the time 
and they may not even still be there. 

Q. And I might have misspoken. Would it have 
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been a liaison with the Center of Elections Systems 
at that time? 

A. No. It would have been with the Secretary 
of State's Office. 

Q. Okay. What files would that introduction in 
the PowerPoint slide have been referring to? 

A. The election results. 

Q. Would it have been referring to the bulk 
update? 

A. No. This is the election results for 
election night. 

Q. Okay. Got it. 

Where do the election results come from on 
the county's side? 

A. The GEMS server. 

Q. Ms. Ledford, can you explain to me what an 
undervote is? 

A. Yes. It's when someone chooses not to vote 
in a particular race. If you have "vote for two" and 
you don't vote for anyone, that's considered an 
undervote. I personally don't consider that an 
undervote, but that's the legal definition of what an 
undervote is. 

Q. Thank you. Is it true that there is some 
amount of undervote in down-ballot contests in 
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statewide elections? 

A. You see it more significantly in down-ballot 
races, but it starts from the top. 

I'm personally one of those people if I 
don't like you, I'm not going to vote for you. I'm 
not going to vote for the other person, but I'm not 
going to vote for you either. 

That's why I say the legal definition is 
yes, but you actually see that. We see that even in 
presidential elections years. People will skip the 
presidential race and vote on everything else. 

But as a general rule, most voters start out 
voting everything at the top. By the time they get 
to about middle ways to the ballot, you start getting 
to the local candidates. You start getting to 
constitutional amendments and statewide referendums. 
You tend to see a lot of drop off. 

Q. Is there a general pattern in terms of the 
undervote rates? 

A. Not that I've ever seen. 

Q. Are you aware that there was an undervote in 
the November 2018 lieutenant governor's race? 

A. Yes. 

Q. Are you aware that the undervote in the 
November 2018 lieutenant governor's race was much 
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larger than had been the case in similar past Georgia 
elections ? 

MR. TYSON: Lacks foundation. Assumes 
facts not in evidence. 

You can answer if you know it. 

THE WITNESS: What was the question 
again? 

BY MR. POWERS: 

Q. Are you aware that the undervote in the 
November 2018 lieutenant governor's election was much 
larger than had been the case in similar past 
elections ? 

MR. TYSON: Same objection, but you can 
answer if you know. 

THE WITNESS: I've never analyzed the 
pattern, so I couldn't answer that. 

BY MR. POWERS: 

Q. Are you aware of any instances in the past 
where the undervote for the lieutenant governor's 
election was much higher than in other statewide 
down-ballot elections? 

MR. TYSON: I'll object. I think we're 
assuming facts that she hasn't testified to 
yet. So maybe if we can add some foundation 
on that point, that might be helpful. 
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MR. POWERS: Yeah. 

BY MR. POWERS: 

Q. We can pull out Plaintiff's Exhibit 10. 

Take your time. 

A. It's at the bottom of the stack evidently. 

I don't have 10. 

I have that in 9 — oh, sorry, it was a 

single — 

BY MR. POWERS: 

Q. Oh, sorry. I meant Plaintiff's Exhibit 9. 

A. It's this one? 

Q. Yes. Previously I asked you to describe the 
number of votes cast and the lieutenant governor's 
race by each candidate; correct? 


A. 

Yes . 



Q. 

As well as 

the governor's race; 

correct ? 

A. 

Yes . 



Q. 

As well as 

other down-ballot races; correct? 

A. 

Correct. 



Q. 

Has anyone 

associated with the 

Gwinnett 


County Board of Elections ever discussed the 
undervote in the November 2018 lieutenant governor's 
race with you? 

A. Yes. 

Q. Who is that? 
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A. Steve Day. 

Q. What did you-all discuss about the undervote 
in the lieutenant governor's election 2018? 

A. I don't remember the exact conversation. I 
just know that, you know, after the election, he — 
about two weeks later, he phoned me and said he had 
noticed that and was asking me questions and I 
couldn't answer his questions. And then I don't 
think we talked about it anymore after that. 

Q. What sorts of questions did he ask you? 

A. I don't remember. I really don't. I've 
slept since then. 

Q. Did you or anyone associated with the 
Gwinnett County Board of Elections conduct any kind 
of analysis of the undervote in the lieutenant 
governor's race? 

A. Not to my knowledge. 

Q. Have you ever considered doing any such 
analysis yourself? 

A. No. 

Q. Do you know if anyone ever looked at the DRE 
voting machines or any other aspect of the election 
apparatus to look for any potential explanation for 
the undervote in the 2018 lieutenant governor's race? 

A. Not to my knowledge. 
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Q. Are you aware of the elections.kennesaw.EDU 
server being accessed by Logan Lamb and other 
individuals. 

MR. TYSON: I'll object. Facts 
not in — lack of foundation. 

I'm sorry. You're asking if she knows 
about it, so that's all right. I'll 
withdraw the objection sorry. 

THE WITNESS: Yes. 

BY MR. POWERS: 

Q. Did that cause you to change any of your 
procedures in Gwinnett County with respect to 
maintaining electoral data? 

A. No. 

Q. Didn't hearing about the Logan Lamb probing 
cause you to change any other policies or procedures 
you had been employing? 

A. No. 

Q. Are you aware of any security measures ever 
having been taken in Gwinnett County to try to search 
for malware or other signs of electronic intrusion 
into Gwinnett County election data? 

A. No, but I wouldn't be the one to answer that 
question. 

Q. Who would? 
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A. IT. 

Q. Who's the head IT person at the Gwinnett 
County Elections Office? 

MR. STEPHENS: If you know. 

THE WITNESS: Yeah. Abe — Abe Kani. 

BY MR. POWERS: 

Q. Have you done anything yourself to try to 
find out whether there's been any kind of intrusion 
into the Gwinnett County elections website or 
electoral infrastructure. 

A. No. 

Q. Do you have any concerns about the 
vulnerability of the existing DRE voting system to 
intrusion? 

A. No. 

Q. Why not? 

A. Well, like I told you before, I'm not a 
techie. And for somebody to have — to me, for 
someone to have intrusion in that system, they would 
have to actually go in, open up the machine and do 
something to it because as we've said — and I've 
heard said many, many — nothing that we have from 
the GEMS database to that DRE unit is connected to 
the Internet. From that unit going back to our 
office, there's nothing connected to the Internet. 
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So I don't know how somebody would get into 
that system to create havoc or chaos or whatever you 
want to call it. 

And I also say that, you know, based on our 
history with it, we've had many elections, we've had 
many recounts, everything has always come out 
correctly. And with the fewer voter complaints that 
we got, I think if there was something going on, we 
would hear more about it from the voters. 

Q. Any other reasons? 

A. No. 

Q. Can election results on the existing DRE 
voting system be audited? 

A. Say that again. I apologize. 

MR. POWERS: Court reporter, can you 
please read the question? 

(Whereupon, the record was read by the 
reporter as requested.) 

THE WITNESS: I do not know. 

BY MR. POWERS: 

Q. Are you aware of there ever being any audits 
of DRE voting systems in Gwinnett County? 

A. The only thing I know about that is that 
Kennesaw State routinely comes out and does things 
with the equipment. And by doing that, they're 
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looking at the individual machines. 

They will run some type of — I think it's 
called a hash program on the GEMS server to be sure 
that there's nothing there. 

So beyond that, I don't know — nobody ever 
touches our equipment outside of our staff and the 
state. 

Q. When was the last time that the hash 
procedure was done in Gwinnett County? 

A. I don't remember. It's been within the last 
couple of years. 

Q. Does the current DRE voting system in 
Gwinnett County have an auditable paper trail? 

A. You're talking about VVPAT, like voter 
verified paper trail? 

Q. I'm talking about — fair enough. I'll ask 
you a better question. 

When a voter casts a ballot on a current DRE 
voting machine, does the DRE machine create a paper 
receipt ? 

A. Not for the individual voter, no. 

Q. Have you received any instructions, advice 
or guidance from the Secretary of State with respect 
to improving the existing DRE voting system in the 
past year? 
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A. Improving the DRE voting system? 

MR. POWERS: Would the court reporter 
please repeat the question. 

(Whereupon, the record was read by the 
reporter as requested.) 

MR. POWERS: Thank you. I'm sorry. I 
missed a word. I'll ask the question again. 

BY MR. POWERS: 

Q. Have you received any instructions, 
guidance, advise, anything like that, from the 
Secretary of State with respect to security 
improvements or enhancements with respect to the DRE 
voting machines in the past year? 

A. In conference, yes. It was discussed just 
making sure that everyone was on the same page and 
that everyone knew there was State Election Board 
rules and regulation and code that talked about 
security and who should have access and how you 
should track your access and things like that. 

So, yes, encouragement from the Secretary of 
State to make sure those things are happening. 

Q. Let's talk about that encouragement. 

What — you mentioned a conference? 

A. Mm-hmm. 

Q. What conference was this discussed at? 
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A. It would have been either GEOA or VRAG, the 
two conferences we talked about earlier. It would 
have been during one of those. 

Q. I know I mentioned them earlier or we 
discussed them earlier, but can you unpack those 
acronyms for — 

A. Yeah. VRAG is the Voter Registrar's 
Association of Georgia and GEOA is the Georgia 
Election Officials Association. 

Q. Thank you. 

And, roughly, when did this conference take 

place? 

A. We have them twice a year, every other year. 
Sometimes we have one a year and then the next year 
we'll have two and the next year we won't have any. 

So it depends on the presidential election cycle. We 
try not to have them when we have other things going 
on. 

So I really couldn't — I know it was 
discussed. I don't remember which of the conferences 
or when it took place. 

Q. That's fair. You think that happened 
sometime in 2018; is that correct? 

A. Well, we didn't have a conference in 2018, 
so it probably would have been in '17. 
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Q. Aside from the 2017 conference, have there 
been any other DRE voting machine security 
enhancements or improvements? 

A. Just what you saw — what we have already 
submitted. 

Q. That was Plaintiff's Exhibit 6, the — 

A. Yes. 

Q. Okay. Are you aware of any plans to improve 
the security of the DRE voting machine system in the 
future? 

A. I wouldn't know. 

Q. Earlier when we talked about delivering the 
voting machines to the polling place and I think you 
had mentioned that there were 11 trucks that the 
Gwinnett County Board of Elections has the DRE units 
delivered on; is that correct? 

A. Yes. 

Q. Are those county trucks? 

A. No. They're rental trucks. 

Q. Is it county employees who are taking the 
voting machines to the various polling places? 

A. It is. 

Q. What's the security protocol for the truck 
delivery of the voting machines? 

A. Meaning? 
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Q. What steps are taken to ensure that the 
voting machines aren't tampered with in some way 
during the transportation process from the county 
board to the polling place? 

A. They are loaded up in the truck and locked. 
And the truck's unlocked when they get to a location. 
They unload them and they lock it back up and go to 
the next stop. 

Q. You said that it was like 18 — I'm about to 
totally make up a number. 

It was a lot of DRE voting machines; right? 
How many was it? 

A. We have 1800, but we don't usually deploy 
all 1800. It can be anywhere from 700 to 1200. It 
just de — or more. It just depends on, you know, 
the election. For instance, the presidential 
election is going to garner more voting equipment 
than the special election we had in March. 

Q. Mm-hmm. Right. 

Does the county hire temporary workers to 
transport all of these machines? 

A. No. It's county employees. 

Q. How long does it take to deliver all of 
these machines to the various polling places? 

A. Three to four days. 
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MR. POWERS: I think now would be a good 

time for a brief break. 

(Recess from 3:07 p.m. to 3:26 p.m.) 

BY MR. POWERS: 

Q. Ms. Ledford, has the Secretary of State 
decided which ballot marking devices are going to be 
used in future elections in Georgia? 

A. We have not been notified. 

Q. Do you know when you will be notified? 

A. No. 

Q. Is Gwinnett County participating in a pilot 
program for the new balloting devices for the 
November 2019 election? 

A. Not to my knowledge. 

Q. Has Gwinnett County put in an order for new 
ballot marking devices in 2019? 

A. No because we don't know what we're getting 

yet. 

Q. Is it — has Gwinnett County put in an order 
for any new ballot marking devices? 

A. No because we don't know what we're getting. 

Q. When Gwinnett County eventually does — 
strike that. 

Is Gwinnett County conducting any county 
election in November of 2019? 
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A. No. 

Q. First, let's talk about cost. 

When Gwinnett County does eventually order 
new ballot marking devices, is the county going to 
have to pay some of the cost for the new devices? 

A. Well, we have a potential distribution list 
from the Secretary of State's office. So, you know, 
those are just estimates. I think at this point I 
don't think that's solid. 

So once the system is chosen and we receive 
the information about the numbers that we will be 
getting, then we will sit down and analyze it, 
determine if we feel like we need to order ballot 
marking devices, poll — you know, just whatever the 
components are going to be. 

So once we get that decision and we know 
what those rollout numbers are, then that's something 
that we'll sit down and look at. 

Q. So at this point it's too early to say, for 
example, whether or not Gwinnett County is going to 
have to pay for any kind of warranty licensing or 
maintenance fees? 

A. Correct. 

Q. Is it currently in Gwinnett County's plan to 
use the new ballot marking devices for the March 2020 
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presidential primary election? 

A. If we have them by then. 

MR. TYSON: Off. 

MR. POWERS: Let's go off the record. 

(Discussion ensued off the record.) 

BY MR. POWERS: 

Q. Presuming that the March 24th, presidential 
primary election date holds, when will the Gwinnett 
County Board of Elections need to receive the new 
BMDs and all of the equipment to get them tested and 
programmed and ready to use for the election? 

A. I can't really say because I don't know — 
you know, without knowing the type and how much we're 
getting and what things are going to happen before we 
ever get them from the Secretary of State's Office, I 
really don't know. 

But I can go back to what I was saying 
earlier that we have to start voting 40 to 45 days 
prior to the election. So we have to have something 
in place by then. 

Again, we're not privy to the rollout 
information as to who is going to get in phases or 
how that's going to work. We don't have that 
information, so we just don't know. 

Q. You'd have to also train election staff on 
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how to use the new BMDs; correct? 

A. Correct. 

Q. Poll workers would need to be trained on how 
to use the new BMDs; correct? 

A. Correct. 

Q. Would any kind of public education efforts 
be made to educate voters on how to use the new 
machines ? 

A. Yes. 

Q. All of that would take some time; correct? 

A. Yes. 

Q. But it sounds like you don't know how much 
time the board of election needs for training and 
public education? 

A. Huh-uh. We know it's going to be a long 
time, but I couldn't say exactly how much. 

Q. Are you spending any time now to plan for 
implementation of the new BMDs? 

A. We can't do that until we know when we're 
going to get them and we don't know that information 
yet. 

Q. So, essentially, you can't do any planning 
at this point? 

A. Correct. 

Q. I'd like to turn briefly back to the 
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November 2018 election. 

Did you or other Gwinnett County Board of 
Elections staff receive complaints about long lines 
at in-person voting sites? 

A. Are you talking about election date or 
advance voting? 

Q. In November 2018. Let's start with election 
day voting. 

A. Yes because we had a problem at two of our 
polling locations. 

Q. What polling locations were those? 

A. I don't remember. Annistown Elementary 
which is precinct 2. I don't remember what the other 
one was. It was in the Snellville area as well. 

Q. Good memory. 

What were the issues that happened in the 
November 2018 — at those two sites? 

A. I think ultimately we determined that there 
was some bad memory cards — not memory cards — 
voter access cards. We don't know how those got in 
the stock or if it all happened — we don't know how 
that happened, but we did have two precincts that had 
bad memory cards. 

We didn't realize it was that. We thought 
it was something with the express poll units, so we 
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did testing, did just a few diagnostic things on that 
and turned out not to be what it was. 

And then we determined that it was the voter 
access card. Once we got more voter access cards out 
there to them, then they were able to start voting. 

And it was still pretty much behind most of the day. 

Voting never stopped. There were people 
casting provisional ballots at those polling 
locations or had the option. Some people chose not 
to. Some people chose to come back. Some people 
chose to go ahead and do it while they were there. 

Q. At both of these polling sites — strike 

that. 

So this voter access card problem was 
essentially the same issue at both Annistown and the 
Snellville polling place? 

A. Yes. 

Q. What does it mean if there's a bad memory 

card? 

A. It's not the memory card. It's voter access 
card. It won't accept — when you put it into the 
express poll unit, it won't accept the ballot. It 
won't accept the ballot program onto that. So when 
you try to put it into a DRE, it just pops out and 
tells you it's an invalid card. It won't allow — it 
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won't bring up a ballot to allow a voter to vote. 

Q. Did that voter access card problem result in 
all of the voting machines at both the Annistown and 
Snellville polling places being inoperable for a 
certain period of time? 

A. Yes. 

Q. Do you know roughly how long that was? 

A. About an hour and-a-half to two hours, I 
think at the longest. 

Q. During that hour-and-a-half to two-hour 
period, voters had the option of casting a 
provisional ballot or waiting in line for the DRE 
voting machines to be fixed? 

A. Correct. Well, it wasn't the DRE machines. 

It was the voter access card. The machines were 
good. It was the voter access card that would not 
program to let the machines do their job, yes. 

Q. To further refine it, they weren't fixing 
the voter access cards. They were bringing new voter 
access cards to replace the faulty ones? 

A. Correct. 

Q. Great. Thank you. 

During that period, did long lines develop 
at both the Annistown and Snellville polling places? 

A. They did. 
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Q. Did you — strike that. 

What was the County Board's response, if 
any, beyond sending the new voter access cards to the 
existing polling places? 

A. There wasn't. We just changed them out; 
made sure they had good cards. 

Q. Were voters — strike that. 

Did the County Board receive calls from 

voters ? 

A. We did. Yes. 

Q. What did the — strike that. 

Were the voters — some of them upset? 

A. Yes. Some them were upset. Some of them 
were not, just wanted to understand why there was a 
line. Once we explained it to them, some of them 
were okay. Some of them were still angry. Some 
people don't trust a paper ballot, so they didn't 
want to vote on a provisional ballot. So they chose 
to wait or to come back later in the day. 

And that particular poll was also kept open 
two hours by a judge for later in the day, so they 
didn't actually close until nine o'clock. 

Q. You're talking about the Annistown polling 
place? 

A. Yes. 
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Q. Was the Snellville polling place kept open 

late? 

A. It was, but it wasn't as long. I believe it 
was only about 45 minutes maybe. 

Q. And you had mentioned that some voters said 
that they were going to leave the polling place and 
come back later? 

A. Yes. 

Q. Do you know if all of those voters ended 
upcoming back to the polling place? 

A. No. We do not because we didn't get their 
names and we didn't track the information. 

Q. Why were the voters who were waiting in the 
lines at the Annistown and Snellville polling places 
given the option of casting a provisional ballot? 

A. Because that's what the State Election Board 
rules say. If your equipment is inoperable, you have 
that paper ballot as a backup. 

And so we offered it. Some people took it. 
Some people didn't. It just — depending on what 
their schedule was for the day. 

(Plaintiff's Exhibit 12 was marked for 
identification.) 

MR. POWERS: I'm handing you what I've 
marked for identification as Plaintiff's 
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Exhibit 12. 

(Witness reviewing document.) 

MR. POWERS: Tell me when you've had a 
chance do look at it. 

(Witness continues to review document.) 

BY MR. POWERS: 


Q. Have you had a chance to take a look? 

A. Yes. 

Q. First, what is Plaintiff's Exhibit 12? 

A. It is a declaration under penalty of perjury 
pursuant to 28 U.S.C. Code 1746 for Derrick Oatis. 

Q. And have you seen this document before? 

A. No. 

Q. On the third page, very top of the third 
page, Mr. Oatis says that after being redirected, he 
went to his polling place at the Suwanee public 
library. 

Are you aware of their being any issues in 
the November 2018 election at the Suwanee public 
library? 

A. No. 


Q. You don't recall receiving any complaints 
from voters who were trying to cast ballots at the 
Suwanee public library? 

A. No. 
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(Plaintiff's Exhibit 13 was marked for 
identification.) 

BY MR. POWERS: 


Q. I'm handing you what I've marked for 
identification as Plaintiff's Exhibit 13. 

What is Plaintiff's Exhibit 13? 

A. It is a declaration by Jeffrey Marion. 
Declaration under personality of perjury pursuant to 
28 U.S.C. Code Section 1746. 

Q. Have you seen Plaintiff's Exhibit 13 before? 
A. No. 

Q. The voter's name here is Jeffrey Marion. 

Do you see that? 

A. Yes. 

Q. It says his polling place is the Annistown 
Elementary School? 

A. Mm-hmm, yes. 

Q. That's the — one of the two polling places 
that you were referring to in your prior testimony? 

A. Correct. 

(Plaintiff's Exhibit 14 was marked for 
identification.) 

BY MR. POWERS: 


Q. I'm handing you what 
identification as Plaintiff's 


I'm marking for 
Exhibit 14. 
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What is Plaintiff's Exhibit 14? 

A. It's a statement by Velma Lambert. 

Declaration under penalty of perjury pursuant to 28 
U.S.C. Code Section 1746 and/or a sworn statement in 
accordance with Georgia law. 

Q. Do you see that the declarant's name is 
Velma Lambert? 

A. Yes. 

Q. She says she voted at the Evangel Community 
Church in Snellville, Georgia? 

A. Mm-hmm. 

Q. Is the Evangel Community Church 
polling place in Snellville that you were 
to in your testimony a little while ago? 

A. I don't remember. I remember it 
Snellville area, but I don't remember which location 
it was. 

Q. Is it possible that the Evangel Community 
Church is one of the two polling places that you're 
recalling? 

A. Like we have a lot of polling places in 
Snellville, so I really don't know. My assumption 
would be yes since it was another long line one. 

Q. Do you recall receiving any complaints 
specifically about the Evangel Community Church? 


the other 
referring 

was the 
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A. I don't. 

(Plaintiff's Exhibit 15 was marked for 

identification.) 

BY MR. POWERS: 

Q. I'm handing you what I'm marking for 
identification as Plaintiff's Exhibit 15. 

What is Plaintiff's Exhibit 15? 

A. The elections result report tape from 
precinct 60 for the November 6, 2018 election. 

Q. And I know we touched on this briefly 
before, but could you remind me what the election 
result tape is and how it's generated? 

A. At the end of the day after the last voter 
has voted, this is the report that prints out of each 
DRE unit from each polling location. 

Q. What is the purpose of the election result 
report tape? 

A. To report the results from that unit. 

Q. Is there a time stamp associated with these 
reports ? 

A. A time stamp? 

Q. On the election — sorry. I'll ask the 
question again. 

Is there a time stamp on the election result 
report tape that's generated at the same time the 
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report is being generated? 

A. It looks like it. 

Q. Is that time stamp made on every single 
election result report tape that's generated by the 
DRE machines? 

A. Yes. 

Q. Could you read for me the top of the 
election result report tape? 

A. Gwinnett County, State of Georgia general 
election November 2nd, 2018. 

Q. So this is for the November 6, 2018 

election? 

A. Yes. 

Q. Below that it gives date, poll center, 
machine ID and other information; correct? 

A. Yes. 

Q. And then below the report number it has a 
time; correct? 

A. Yes. 

Q. The time — what does the time here say? 

A. 1:18. 

Q. And then is there a date given to the right 
of the time? 

A. Yes. 

Q. What is the date that's listed here? 
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A. 06/02/2003. 

Q. Shouldn't the date given on the election 
result report tape be November 6th, 2018? 

A. I don't know what that date's for, so that 
could have been an update to the card. It could have 
been an update to the machine and it's printing out 
on this. I don't know what. 

Q. If it was updating, why would it list a time 
that happened 15 years ago? 

A. Because that may have been when it was 
updated. I don't know. Like I said, I don't look at 
this part of the card. When I look at these, I'm 
usually looking at the results. So I don't know what 
the top part of that means. That's something you'd 
have to ask somebody besides me. 

(Plaintiff's Exhibit 16 was marked for 

identification.) 

BY MR. POWERS: 

Q. I'm handing you what I'm marking for 
identification as Plaintiff's Exhibit 16. 

Actually, a little bit of clean-up. Before 
we turn to 16, with respect to Plaintiff's Exhibit 
15, would you mind telling me the precinct number and 
name for Plaintiff's Exhibit 15? 

A. It's precinct 60 Lawrenceville D. 
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Q. Turn back to Plaintiff's Exhibit 16. 

What is Plaintiff's Exhibit 16? 

A. The election results report from Gwinnett 
County, State of Georgia general election November 6, 
2018 . 

Q. What is the precinct number and name on 
Plaintiff's Exhibit 16? 

A. Precinct 73, Pinckneyville P. 

Q. And going down again to the time and date, 
what is the time listed on Plaintiff's Exhibit 16? 

A. 1824. 

Q. So that would be 6:24 p.m.? 

A. Sure. 

Q. Is the date — what's the date on 
Plaintiff's Exhibit 16? 

A. 11/06/2018. 

Q. Do you know if that time and date stamp is 
of the date and time that this election result report 
is being generated? 

A. I do not. 

Q. Ms. Ledford, I'd like to go back to the GEMS 
database which we discussed a little while ago. 

A. Yes. 

Q. How does the — remind me again how the 
Gwinnett County Board of Elections receives the GEMS 
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database from the Secretary of State? 

A. We go down to Atlanta and we sign for and 
receive it in a locked container. And it's brought 
back to the office. 

Q. Who is the employee with the Gwinnett County 
Board of Elections that goes down to pick up the hard 
copy of the GEMS database? 

A. It could be anyone from our — any full-time 
staff member. 

Q. It just kind of depends on who's available? 

A. Who has time, correct. 

Q. Are there any limitations in terms of which 
Gwinnett County Board of Elections employees have 
access to or can be made available to pick up the 
hard copy of the GEMS database? 

A. No. Again, it's just whoever has time. 

Q. Is any kind of nondisclosure agreement 
required for Gwinnett County staff members who come 
into contact with the GEMS database? 

A. No. 

Q. How many people have access to the GEMS 
database? 

A. The GEMS database? 

Q. Mm-hmm. 

A. Just two. 
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Q. Who are those people? 

A. Kristi and Kelvin. 

Q. How many people have access to the GEMS 
server? 


A. Same. 

Q. Does Gwinnett County have a GEMS license? 

A. I don't know. I don't know. 

Q. Who with the Gwinnett County Board of 
Elections might know? 

A. No one. It would be me, so... 

Q. Is it fair to say then that Gwinnett County 
Board of Elections does not have a GEMS license? 

A. I would say so, yes, because it's not really 
our program. 

Q. When the Board of Elections employees 
deliver the DREs to — strike that. 

When, for municipal elections, DRE voting 
machines are transferred to the municipalities, is it 
Gwinnett County staff or the municipality staff who's 
responsible for transporting the voting machines to 
the city? 


A. The municipal staff. 

Q. When they take possession of the machines, 
do they have to sign any kind of documentation? 

A. There is a chain of command paperwork. Yes. 
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Q. Are there any restrictions or limitations or 
requirements with respect to which employees with the 
municipalities are permitted to pick up the DRE 
voting machines? 

A. Not from our side. 

Q. When staff for the municipalities — strike 

that. 

So if a municipality sent a contractor or 
temporary employee to the Board of Elections to pick 
up the voting machines, you wouldn't turn them away? 

A. We've never had that, so it's always been 
full-time employees of the City. I think that's just 
a gentleman's agreement that we've had with them 
since they started using the equipment. 

Q. Got it. And do municipal employees have to 
sign any kind of nondisclosure agreement when they 
take possession of the DRE voting machines? 

A. What would they have to disclose? So no. I 
mean, there's nothing on the machine. They are 
blank. They are shells when they get them. So, no, 
there's no nondisclosure. 

Q. When — strike that. 

Prior to DRE voting machines being 
transferred to municipalities, is all of the memory 
from those machines erased? 
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A. I don't know. They don't have the memory 
card in them, so that part is gone. As far as the 
redundant, I'm not sure. 

Q. The memory cards for the machines go 
directly from the Georgia Secretary of State's office 
to the municipalities? 

A. No. The state doesn't have memory cards. 

The memory cards are all with the voting unit. So if 
they get a voting unit, they get the memory card with 
it. 

It gets programmed somewhere with the City 
whether it be a contractor — I don't know how that 
part takes place. They just get the equipment and 
the peripherals from us and that's it. 

Q. Got it. So just to make sure I understand 
this correctly, the municipalities are essentially 
getting a blank — that's probably a bad way of 
putting it. Let me try again. 

When the voting machines are transferred to 
the municipalities, the — is it accurate to say that 
there's a blank memory card in the voting machines? 

A. Correct. 

Q. And the memory has been wiped from those 
cards in advance? 

A. Yes. 
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MR. POWERS: Perhaps, we can take very 

brief break. 

(Recess from 4:06 p.m. to 4:15 p.m.) 

BY MR. POWERS: 

Q. Before we broke, you were talking about the 
erasure of the internal memory of the DRE. 

Can you explain to me in general terms how 
the internal memory is erased from the DRE machines? 

A. I cannot because I don't know when that's 
done or how often that's done. I just know that in 
periods that's done and that's really all I know 
about it. 

Q. Is there any particular requirement in terms 
of when the data has to be removed or deleted? 

A. Not to my knowledge. 

Q. So is it a discretionary decision made by 
the Board of Elections staff members? 

A. No. It's not anything that we do. It's 
done by the State. 

Q. Can you explain to me how that process works 
in terms of the State removing or deleting the 
internal memory? 

A. Well, if I'm — I can't talk a whole lot 
about it because I don't really know. I can tell you 
that it has periodically happened since we've had the 
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equipment since 2002. 

I couldn't tell you if it's done because my 
memory is just shot on this. I don't know if it's 
every — you know, after every presidential election. 

I don't know if it's on any — I don't know what the 
cycle is on doing that. But I can tell you in the 
life of the equipment that we have, it's been done 
several, several times over the years. 

Q. What's the chain of custody at that point? 

A. It takes place at our office. They actually 
send staff out to our prep center and that's what we 
do. 

We line the equipment up for them every day. 
And I guess they have a list, an inventory list. And 
they go through and make sure that they've hit all of 
the equipment. 

They do updates. They do all of that type 
of internal, I guess, mechanizations or what they 
deal with. The staff doesn't do anything with that. 

Q. When these deletions happen, are they 
removing the internal data on all 1800 voting 
machines ? 

A. Correct. 

Q. How many employees does it take to — strike 

that. 
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How long does it take to delete the internal 
memory from all 1800 voting machines? 

A. They usually do it in about a week, 
five days. 

Q. Just to make sure I'm clear on something, 
before the County Board of Elections transfers the 
voting machines to the municipalities, is the 
internal memory deleted as a matter of policy? 

A. As a matter of policy, no. Like I said it's 
not something that's done by our staff. It's done by 
the State. And I couldn't say if it's done before — 
like I said, I don't know what routine it is. So I 
don't know that it was always done, you know, in an 
even numbered year which is when we have elections 
versus odd numbered years which is when most of the 
cities have their elections. 

Q. As the -- strike that. 

When was the last time that the internal 
memory was removed or deleted from the DRE machine? 

A. I don't know. I could tell you it was 
before 2018 and I don't know if it's been done since 
then. 

Q. Thank you. 

Now, let's consider a situation in which 
municipalities had to vote using optical scan. 
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How many optical scanners would 
municipalities need to conduct an election entirely 
using optical scan? 

A. It depends on the size of the 
municipalities. We have some that only have, I 
believe, 1600 registered voters and we've got one 
that's got almost 30,000. So it just depends on the 
size of the city and what they anticipate their 
turnout is going to be. 

Q. Based on historical patterns in the past 
ordering practices of the municipalities, what's the 
range from the municipality with 1600 people to the 
one with 30,000 people? 

A. For optical scan units? 

Q. (Counsel nods head affirmatively.) 

A. They usually take two to four because the 
ones that take two have one and they use it for 
backup. And the ones that take multiple would be 
bigger cities where they were doing their early 
voting. You know, they would have them if somebody 
needed to cast a provisional ballot or further 
absentee ballot process. So two to four. 

Q. Got it. So a city with 30,000 people might 
need four optical scan units? 

A. Mm-hmm. 


.APGREPORTING.COM 


APG USA INC. 


(888) 542-5598 



1 

2 

3 

4 

5 

6 

7 

8 

9 

10 

11 

12 

13 

14 

15 

16 

17 

18 

19 

20 

21 

22 

23 

24 

25 


Case l:17-cv-02989-AT Document 441 Filed 07/01/19 Page 401 of 4^ ge 179 


Curling et al. v. 
Raffensperger et al 


Deposition of 
T. LYNN LEDFORD 


6/24/2019 


Q. How many optical scan units does the 
Gwinnett County Board of Elections currently own? 

A. I think we have 36 — 32 or 36. 

Q. Thirty-two or 36? 

A. Yes. 

Q. So in a situation where cities were 
conducting elections using optical scan units, would 
you anticipate receiving a request from — 
for optical scan units from all Gwinnett County 
municipalities or only those that currently request 
DRE voting machines from you? 

A. Well, we have 16 cities wholly or partially 
located in Gwinnett and there is no rhyme or reason 
as to when or how they choose to use the equipment. 

So I'm not qualified to answer that question 
based on I just don't have the history — it's just 
all over the place and I wouldn't want to speculate 
on that. 

Q. Got it. 

So there are 16 municipalities in Gwinnett 

County? 

A. Yes. 

Q. Are they all conducting their own elections 
in November of 2019? 

A. For the ones that are having them except for 
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Braselton and Jackson County because it's the City of 
Braselton and, actually, Walton County conducts the 
City of Auburn. 

Q. What about Buford? 

A. They conduct their own. 

Q. Let's consider now the March primary 
election. 

If Gwinnett County were holding an election 
using optical scanners for the March 2020 primary, 
how many optical scanners would the County need? 

A. I don't know. We would need — it would 
have to be a minimum of two for 156 polling 
locations. That would be a bare minimum. 

You've got people standing in line. It 
takes a while to read those. In Gwinnett County, our 
ballots usually are a little bit longer, so we have 
to account for that as well. 

We also have eight advance voting locations. 
We would need a minimum of five at those so whatever 
that number would be. And, like I said, that would 
be just the bare minimums. That would not suffice. 

You would have to have three or four units at the 
site and probably 10 at the advance voting sites 
because those scanners are not very quick either. 

Q. You've reminded me of something. 
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So I'm going pivot quickly back to DRE 
voting machines and in particular to the DRE voting 
machines that are used for early voting. 

A. Mm-hmm. 

Q. Roughly, how many DRE voting machines are 
used for early voting in, you know, the November 
election in an even numbered year? 

A. We have 15 at seven at the sites and 35 at 
our office. 

Q. Make sure I understand this correctly. 

There are seven early voting sites and each 
ry single one will have 15 — 

15 . 

DRE machines? Got it. 

So all total, there's well over a hundred 
DRE voting machines used for early voting? 

A. Correct. 

Q. Are those voting machines that are used for 
early voting also used for voting on election day? 

A. No. You can't do that. 

Q. Why is that? 

A. Because that's the way the rules are set up 
on that. Those machines, when they close down on 
Friday, they are sealed up, sequestered and they are 
brought back to our office. And that's where they 


of them, ev 

A. 

Q. 
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stay sealed until 7:00 p.m. on election night. 

Q. You may have said this and I just missed it. 

When are the DRE early voting machines 
physically moved from the early voting location to 
the Board of Elections Office? 

A. On election they're — some of them are 
actually on Friday night as soon as the polls closed 
and then others are on Saturday and Monday. We try 
to have them out — our satellites are community 
centers at our parks and we don't want to leave the 
equipment there, you know, more than what we have to 
even though it's sealed and corded and all that. 

Q. Yeah. Now I'm going to pivot back to 
optical scan world. 

Does the Gwinnett County board ever have to 
purchase its own optical scanners? 

A. Yes. 

Q. Why does it have to do that? 

A. Because the initial rollout in 2002, I 
believe, we had maybe 20. And we knew that we were 
going need more than that, so we purchased just five, 
six, seven, whatever, here, there over the years. 

And that's to accommodate not only the absentee 
ballot but also the provisional ballot because that 
has continued to get larger and larger. And with 
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that, we need the machines to count those ballots as 
well. 

Q. Where — strike that. 

Where do you go to buy new optical scanners? 
A. ES&S. 

Q. And you purchase it directly from ES&S? 

A. Correct. 

Q. Have you ever looked to see if Gwinnett 
County could purchase additional optical scanners 
from other elections who used to use that kind of 
optical scanner but no longer do? 


A. 

You mean 

out 

s 

ide the state 

of ( 

Georgia? 

Q. 

Anywhere. 

Anywhere 

• 




A. 

We can't 

use 


any equipment 

from ( 

Dutside the 


state of Georgia. We can't buy -- I apologize. Let 
me take that back. 

I think we can actually buy used equipment 
now, but that just changed within the last few years. 
But we haven't needed to purchase any that way, so 
ours have come through ES&S. 

Q. I was going to ask if you're aware if some 
counties in Georgia actually had received optical 
scanners from counties from other states? 

A. I know that other states made it available. 

I don't know personally of any county. We've just 
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never had that discussion. 

(Plaintiff's Exhibit 17 was marked for 
identification.) 

BY MR. POWERS: 

Q. I'm handing you what I've marked for 
identification as Plaintiff's Exhibit 17. 

Could you please tell me what Plaintiff's 
Exhibit 17 is? 

A. It's the Election Day Management Training 
Workbook for the 2018 General Election. 

Q. Thank you. 

A. Mm-hmm. 

Q. If you wouldn't mind turning to chapter 
five. I think it's actually the last page of the 
exhibit. 

A. Mm-hmm. 

MS. MARKS: She's on a different page 
than you are. 

MR. POWERS: I'm looking at a page that 
has 60 at the top left-hand corner? 

THE WITNESS: I don't have that. 

(Discussion ensued off the record.) 

BY MR. POWERS: 

Q. So what is corrected Plaintiff's Exhibit 17? 
A. It's the Election Day Manager Manual. 
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Q. If you wouldn't mind turning to page 60. 

A. It's actually chapter five of that. 

Q. Chapter five? 

A. Yeah. 

MR. TYSON: Just so we're clear for the 

record, this is a portion of the manual not 

the complete manual; is that correct? 

THE WITNESS: Yes. 

MR. TYSON: Just so that's clear for the 

record. 

MR. POWERS: Thank you. 

BY MR. POWERS: 

Q. What does chapter five page 60 of the 
Election Day Manager Manuel discuss? 

A. The log sheet for actions taken on DRE and 
express poll. 

Q. Would you mind reading the first sentence? 

A. Whenever an update or canceling action is 
taken either on the express poll or the DRE. 

Q. It provides a series of steps after that; is 
that correct? 

A. Mm-hmm. 

Q. Is one of those below that, does it say that 
one of the actions that must be recorded include 
canceling a ballot on the DRE unit? 
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A. Yes. 

Q. What are the steps that poll officials have 
to go through if they are canceling a ballot on the 
DRE unit? 

A. I'd have to look. I don't remember. It's 
been a long time since I've done it myself. 

Q. Specifically, I'll point you to the second 
sentence of the first paragraph on the — 

A. Updating a voter's status? 

Q. Yeah. 

A. If a voter is issued an absentee ballot, the 
express poll does not reflect whether that ballot was 
received back or not. 

So if the voter shows up at the poll and it 
shows in the express poll that they have been issued 
an absentee ballot, in order for that voter to then 
be allowed to vote at the poll, they either have to 
have the ballot with them to cancel it or they fill 
out a cancelation form. 

Once they do that, the poll workers go into 
Election Net — I'm sorry — express poll and they 
unmark that voter. And they will take out that 
absentee notation and put the voter back in an active 
eligible status. And then they encode a voter access 
card and the voter goes to the DRE unit to vote. 
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Q. So that's a situation where — is that — 

okay. 

So is that what is being described here with 
respect to canceling a ballot on the DRE unit itself? 

A. No. That's canceling it on the DRE — I'm 
sorry. That's canceling it on the express poll so 
that they can then cast it on the DRE. 

Canceling a ballot on the DRE is the 
situations we discussed earlier. If the voter gets 
the wrong ballot and they realize it but they've put 
the card in, it comes up and it's Republican versus 
Democrat. Then the only way to get the card out 
without casting a ballot is to cancel the ballot even 
though it hasn't been cast yet. 

So we also have to do that from time to 
time. And if they do that, then they have to mark 
that, too, because that's part of their 
reconciliation at the end of the day. 

Q. So that cancellation has to be recorded here 
even if that vote had been started never actually 
gets completed? 

A. Correct. 

Q. It's not referring to a situation which a 
voter actually completed casting a ballot? 

A. Right. Because as we said earlier, once you 
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cast the ballot, it starts randomizing it in the 
unit, so we would have no way to identify that 
voter's ballot. 

MR. POWERS: Got it. Thank you. 

(Plaintiff's Exhibit 18 was marked for 

identification.) 

BY MR. POWERS: 

Q. I'm handing you what I'm marking for 
identification as Plaintiff's Exhibit 18. 

What is Plaintiff's Exhibit 18? 

A. Official election bulletin from the 

f State's Office regarding open records 

d you receive this official election 
bulletin from Chris Harvey? 

A. Yes. 

Q. What does Plaintiff's Exhibit 18 say? 

A. Multiple counties have reported receiving 
open records requests asking for data such as DRE 
audit logs, copies of DRE tapes and ballot image 
reports and/or copies of ballot images. 

Q. Could you please read for me the sentence in 
the third paragraph of Plaintiff's Exhibit 18? 

A. Ballot images are not subject to open 
records requests per the advice of the Attorney 


Secretary 
request. 

Q. D 
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General's Office. 

(Plaintiff's Exhibit 19 was marked for 
identification.) 

BY MR. POWERS: 

Q. I'm handing you what I've marked for 
identification Plaintiff's Exhibit 19. 

A. Mm-hmm. 

Q. What is Plaintiff's Exhibit 19? 

A. I have no idea. I've never seen it. 

Q. Is Plaintiff's Exhibit 19 a ballot image 
report ? 

don't know. I've never seen this before, 
seen one of these. 

ve you ever seen a ballot image report 

before? 

A. No. No. 

Q. That's fair. Do you know why ballot image 
reports are no longer a public record? 

A. I don't know they were ever public record 
because we've never been asked for one. If that's 
what this is, I've never seen one, so I don't know. 
So, no, I do not know. 

MR. POWERS: Fair enough. I need 
another minute or two. Take a break. But I 
think it might be easier actually for you 


A. 

I've neve 

Q. 
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guys to stay and us to move because I am 
coming to the end. 

(Recess from 4:43 p.m. to 4:45 p.m.) 

MR. POWERS: Plaintiffs have no further 
questions. We would like to meet and confer 
regarding the discovery issues outlined in 
your respective letters once the deposition 
is concluded. 

MR. TYSON: I just have a couple of 
questions for you, Ms. Ledford. 

EXAMINATION 

BY MR. TYSON: 

Q. Mr. Powers asked you earlier about whether 
you trusted the DRE system. Do you remember that 
question? 

A. Yes. 

Q. Why is it that you trust the DRE system that 
we use in Georgia? 

A. Basically, again, it's a history thing. The 
way that everything is brought in and programmed and 
sealed and secured and checks and balances — and the 
one thing I will say to that is all these experts 
that have tested all this equipment have never done 
it in a true election environment. They set up their 
own environment. They really have no idea what we do 
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and nobody's ever really asked. 

So I think that there's oftentimes a rush to 
judgment without asking proper questions or getting 
more detailed information. And, you know, for those 
of us in elections administration, we take our jobs 
very, very seriously. And we want every election to 
be as good as it can. 

There's no perfect election. There's 
absolutely no perfect election equipment, but we've 
not had — to my knowledge, we've not had problems 
with ours or it's not questionable. 

Q. We definitely appreciate your work and all 
the work of your staff. 

A. Thank you. 

MR. POWERS: And I do, too. 

BY MR. STEPHENS: 

Q. Mr. Powers asked you as well about feeding 
ballots through optical scanners for recounts? 

A. Mm-hmm. 

Q. When you have a ballot that is long or 
additional size, does that take longer to feed 
through the optical scanner? 

A. The optical scanners that we have are not 
high speed scanners as most people who have watched 
us count those things knows and if you have — you 
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know, and different ones react different ways to 
different ballots. 

So sometimes you have what's called 
shuffling. You put it in. It will shuffle it three 
or four times and then it takes it. The next one it 
will take and the next one it will shuffle it. Well, 
it won't take, so then you have to turn it upside 
down. You have to do it backwards. You have to do 
it different orientations. 

So, you know, like I said, you can try to 
average an amount of time to do a ballot, but if 
you've got a two-page 18-inch ballot, which is what 
we had in November and especially when you have 
multiple folds within the ballot as well, it creates 
additional time to read those ballots. 

The easiest ballots to read are the 
provisionals because they're straight. We print 
them, we duplicate them and they go straight into the 
optical scan. But the provisional — absentee 
ballots are very, very difficult to scan. 

Q. Then there was some discussion earlier about 
the process. You mentioned having to duplicate 
98 percent of the provisional ballots. 

Can you explain a little bit what ballot 
duplication means for paper ballots? 
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A. Yes. One of the reasons that people can 
choose to vote a provisional ballot is if they show 
up at an incorrect poll and they don't have time or 
make a fuss and don't want to go to the correct poll. 
Poll officials are — at that point will offer them a 
provisional ballot. 

Well, if they're at the wrong polling 
location, the ballot at that poll are only for — or 
the precinct are only for that precinct. So if you 
have a voter that lives in Dacula but they are trying 
to vote in Snellville, that ballot is not going to be 


the same. 




So when that ballot 

. comes in on election 

night, we have to research that and we ] 

pull the 


correct ballot for the voter. And then we take the 
ballot that they actually voted and anything that 
they were eligible to vote for, we transfer onto that 
duplicate ballot. And they're labeled "original" and 
"duplicate." And then the duplicate is what is 
actually read for tabulation. 

And the duplication process involves three 
people. You have to have one person read the 
original ballot, one person mark the duplicate ballot 
and one person to monitor that process. 

Q. Would you consider the ballot duplication 
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process a time consuming exercise? 

A. Yes. Because it's very manual. It's a 
very, very laborious process. When people are tired, 
you know, we came in at four, five o'clock on 
election morning and we only have three days to get 
these things done and you're trying to do everything 
else. You've got to wrap up an election. 

It's an accurate process but, again, it 
takes a very long time to get there. 

Q. Once you start counting ballots after the 
polls close on election night, is there a requirement 
that you continue counting until you finish? 

A. Yes. We would love that law to be changed. 
They missed that House Bill 316. I'm just saying. 

And I understand. You don't want to lose 
the integrity of the system. And there are people 
who would think that some Keebler elves come in and 
manipulate ballots or do something. 

So, yes, we stay there until we're done, 
which is oftentimes — depending on the election 
could be two or three o'clock in the morning or it 
could be like this last election where it was four 
o'clock in the afternoon the next day. 

Q. So Wednesday afternoon at four o'clock is 
when you finished the 2018? 
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A. Yes. And we came in at five o'clock on 
Tuesday morning. 

Q. And that was an election that involved both 
DREs for the majority of votes and then paper ballots 
for a small subset? 

A. Correct. And there was a problem with the 
printing of the ballots. DeKalb County had a 
problem. Gwinnett had a problem. 

(Reporter requests that witness slow 
down.) 

THE WITNESS: Gwinnett and DeKalb had 
that problem. So duplication was greatly 
multiplied during that time. So almost 
every ballot had to be duplicated. And then 
some of the duplicated ballots had to be 
duplicated as well. 

And so it was a — and it's a very 
manual, very laborious process — laborious, 

I'm not sure how you pronounce that word. 

BY MR. TYSON: 

Q. And so when you're describing that ballot 
printing issues, did that keep the paper ballots from 
being read by the optical scanners? 

A. Correct. 

Q. And that's why you had to have duplication 
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where it was a format they could actually read? 

A. Yes. 

MR. TYSON: I don't have any further 

questions. 

MR. STEPHENS: Cheryl? 

EXAMINATION 

BY MS. RINGER 

Q. You had spoken a bit about the number of 
optical scanners that you had. If you had to do a 
countywide optical scan paper ballot election, how 
many scanners do you think you would need? 

A. I know we talked about that earlier. You 
would have to have a very, very minimum of two per 
156 — 

Q. That's what I missed. I was looking at my 
notes and I didn't get it, so — 

A. Yeah. We said a very, very minimum of two 
for 156 polling locations and then very, very minimum 
of five for seven satellite voting locations and the 
main office. 

Q. I missed that. Okay. 

A. I don't know where we would store all those 
ballots either. 


MS . 

RINGER: 

No 

further questions. 

MR. 

POWERS: 

No 

redirect. 
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THE REPORTER: She's reading and 
signing, I take it? Is she reading and 
signing? 

MR. STEPHENS: Yes. 

THE WITNESS: Yes. 

(Transcript orders taken by audio 
record.) 

(Deposition concluded at 4:52 p.m.) 

(Signature reserved.) 
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CERTIFICATE 


STATE OF GEORGIA: 

COUNTY OF FULTON: 

I hereby certify that the foregoing 
transcript was taken down, as stated in the caption, 
and the colloquies, questions, and answers were 
reduced to typewriting under my direction; that the 
transcript is a true and correct record of the 
evidence given upon said proceeding. 

I further certify that I am not a relative 
or employee or attorney of any party, nor am I 
financially interested in the outcome of this action. 

This the 28th day of Uune, 2019. 
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DISCLOSURE 


STATE OF GEORGIA: 

COUNTY OF DEKALB: 

Deposition of TERESA LYNN LEDFORD. 

Pursuant to Article 8.B. of the Rules and 
Regulations of the Board of Court Reporting of the 
Judicial Counsel of Georgia, I make the following 
disclosure: 


I am a Georgia Certified Court Reporter 
acting as an agent of APG USA, Inc., who was contacted 
by the offices of Lawyers' Committee for Civil Rights 
Under Law, to provide court reporting services for 
this deposition. I will not be taking this deposition 
under any contract that is prohibited by O.C.G.A. 


1 

5-14-37 1 

(a 

) and (b). 







APG USA, In< 

c., has 

no contract 

t 

0 provide 

r 

eporting 

s 

ervices with any ] 

party to the 

! case, any 

counsel ir 

1 

the case, < 

cr any : 

reporter or 

reporting 

agency from 

. whom a re: 

ferral 1 

right have bee 

n made to 


report this deposition. APG USA, Inc., will charge 
its usual and customary rate to all parties in the 
case, and a financial discount will not be given to 
any party to this litigation. 


Marsi Koehl, CCR-B-2424 


Date: 6/28/19 
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UNITED STATES DISTRICT COURT 
FOR THE NORTHERN DISTRICT OF GEORGIA 
ATLANTA DIVISION 


DONNA CURLING, et al.. 
Plaintiffs, 

vs . 

BRAD RAFFENSPERGER, et al. , 
Defendants. 


) 

) 

) 

) CIVIL FILE ACTION 

) 

) NO. 1:17-cv-02989-AT 

) 

) 

) 

) 


The preceding deposition taken in the matter, on 
the date, and at the time and place set out on the 
title page hereof. 

It was requested that the deposition be taken by 
the reporter and that same be reduced to typewritten 
form. 


It was agreed by and between counsel and the 
parties that the Deponent will read and sign the 
transcript of said deposition. 
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CERTIFICATE 


STATE OF 
COUNTY/CITY OF 


Before me, this day, personally appeared, TERESA 
LYNN LEDFORD, who, being duly sworn, states that the 
foregoing transcript of her deposition, taken in the 
matter, on the date, and at the time and place set out 
on the title page hereof, constitutes a true and 
accurate transcript of said deposition. 


TERESA LYNN LEDFORD 


SUBSCRIBED and SWORN to before me this 

_day of_, 2019 in the 

jurisdiction aforesaid. 


My Commission Expires 


Notary Public 


[] No changes made to the Errata Sheet; therefore, I 
am returning only this signed notarized certificate. 

[] I am returning this signed, notarized certificate 
and Errata Sheet with changes noted. 
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DEPOSITION ERRATA SHEET 
Deponent: TERESA LYNN LEDFORD 

Deposition Date: June 24, 2019 
To Reporter: 

I have read the entire transcript of my deposition 
taken in the captioned matter or the same has been 
read to me. I request that the following changes be 
entered upon the record for the reasons indicated. I 
have signed my name to the Errata Sheet and 
appropriate Certificate and authorize you to attach 
both to the original transcript. 

Page No. Line No. 

Change to: 

Reason for Change: 


Page No. Line No. 

Change to: 

Reason for Change: 


Page No. Line No. 

Change to: 

Reason for Change: 
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Deposition of TERESA LYNN LEDFORD 

Page No. Line No. 

Change to: 

Reason for Change: 

Page No. Line No. 

Change to: 

Reason for Change: 


Page No. Line No. 

Change to: 

Reason for Change: 

Page No. Line No. 

Change to: 

Reason for Change: 


Page No. Line No. 

Change to: 

Reason for Change: 


Signature: 

TERESA LYNN LEDFORD 


Date: 
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Figure 2-6. GEMS window 


2.3. Deleting a database 

A GEMS database may be deleted as follows: 

1. Activate GEMS either from the Start menu or from the desktop. 

2. In the Connect to Database window, select the desired database in the Existing Database Name 
list, then click on the Delete button. 
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3.2.1. Configuring the election 


In order to configure election options when configuring the election: 


1. Click on Setup in the menu bar, then Election in the drop-down menu. 

"i Kaolil View Vote Center Ar 



1 

Users 

Regions 

Language 

s 


Figure 3-8. Selecting Election Options 


2. Define an election title no more than three lines in the Name of Election field. This title appears 
on all GEMS administrative and election results reports. 

3. Specify the election date and time in the Election Date/Time fields. The entire election date may 
be selected from a drop-down calendar, while the day and year may be also be entered manually. 
Changing the date or year automatically cause the weekday to be set accordingly. 



Figure 3-9. Activating the calendar 


The calendar is activated by clicking on the drop-down list arrow. An earlier or later month may 
be selected by clicking on either of the arrows in the top left- and right-hand corners of the 
calendar. A month may also be selected by clicking on the month name in the calendar, which 
activates a drop-down list containing all months of the year, from which the desired month may be 
selected. 
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Figure 3-26. Defining voter groups under the Parties tab 

13. If polling and absentee voters are to vote on distinct ballots, click on the Absentee/NonAbsentee 
tab in order to define Polling and Absentee voter groups. 

14. Click on the New button. 

15. The new voter group appears with ‘VGroup 20’ by default in the Label entry field, as well as in the 
Name display column. Select the label value, and enter ‘Polling’. 

16. Enter a 1 to 3 character party code corresponding to the Polling voter group in the Tag field. 

17. Change the Id number if the sequence in which the voter group appears is to be altered. 

18. Enter an export Id in the Export field, if required. 

19. De-select the Rotate Ballots check box if polling ballots are not to be rotated. 

20. Enter a value into the Percent Ballots field between 0 and 100, if card quantities are to be 
computed by absentee/non-absentee voter group. 

21. Click on New again, and now define the Absentee voter group in a similar manner. 
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Figure 3-46. AccuVote-OS Options - Tally Settings tab 

22. Click on the OK button in order to save results. 

3.11. AccuVote-TS Options 

AccuVote-TS display and counting options are defined in the AccuVote-TS Options window. These 
options do not apply to the AccuVote-OS. Changing AccuVote-TS Options requires that memory cards 
be re-programmed. 

Refer to section 3.8 AccuVote-TS Options in the GEMS 1.18 Reference Guide for an explanation of the 
concepts behind AccuVote-TS options in GEMS. 

1. Click on Setup in the menu bar, then AccuVote-TS Options in the drop-down menu. 
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Figure 3-47. Activating the AccuVote-TS Options window 

2. Enter the height of the voting mark box in pixels in Vote Box Size, if it differs from the default 
value. 


© Diebold Election Systems, Inc. 2005 


3-35 


GEMS 1.18 User’s Guide 

































Case l:17-cv-02989-AT Document 441 Filed 07/01/19 Page 431 of 443 


&EBOLD Election Setup 

ELECT I OH SYSTEMS 

3. Change the number of columns the ballot is to be laid out over in the Columns field, if it differs 
from the default value. 

4. Enter a desired ballot scale percentage in the Scale Factor field. 

5. Enter the desired button height in pixels in the Button Height field. 

6. Select the One Click Vote check box if voters are not to re-select an existing candidate selection 
before making another selection. In order to require the voter to re-select a candidate in order to 
make another selection in a race, do not select this check box. 

7. Select the PA Straight Party check box if existing candidate selections are to be retained upon 
making a straight party selection. In order for candidate selections made prior to the straight 
party choice to be lost, do not select this check box. 

8. Select Hide Instruction Page to hide the Jump Button 'Instruction' and the Instruction Page. 
Deselect Hide Instruction Page to show the Jump Button ‘Instruction’ and the Instruction Page. 

The Instruction Page describes how to use the AccuVote-TS unit for voting. The Jump Button 'Instruction' 
displays the Instruction Page when pressed. The Instruction Page is displayed after the voter inserts their 
voter card into the AccuVote-TS unit. The Jump Button 'Instruction' is displayed on every page of the 
voter's ballot. 

9. Select Hide Summary Page to hide the Jump Button 'Summary' and the Summary Page. 

Deselect Hide Summary Page to show the Jump Button “Summary’ and the Summary Page. 

The Summary Page displays a summary of all races and voter's selections for each race after the last 
race on the ballot has been displayed. The Jump Button 'Summary' displays the Summary Page when 
pressed. The Summary Page is displayed when the last race on the voter's ballot has been displayed and 
the Next button is pressed. The Jump Button 'Summary' is displayed after the Summary Page has been 
displayed and either a race summary is selected or the Back button is pressed. 

10. Select Hide Jump Buttons to hide the Jump Buttons 'Instructions' and 'Summary'. Deselect Hide 
Jump Buttons to show the Jump Buttons 'Instructions' and 'Summary' during a voter's voting 
session. 

(See the descriptions of the Instruction and Summary Pages options above.) 

11. Select the Confirm Ballot check box if a confirmation dialog box prompting the user to confirm that 
they would like to cast their ballot is to be displayed before the voter’s ballot is cast. 

12. Select the Voter Group Color check box if the color defined for a voter group in the Voter Group 
Editor is to determine the AccuVote-TS background page color in a closed primary election. Do 
not select the check box if the voter group color is not to determine the AccuVote-TS page color 
in a primary election. Do not select the check box in a general election. 

13. Select the Race Keys check box in order to be able to advance to the next race, or return to the 
previous race, without traversing the entire candidate list. In order to require the voter to traverse 
the entire candidate list in order to advance to the next race, or return to the previous race, do not 
select this check box. 

14. Leave the Play All Candidates check box selected in order to require the audio voter to traverse 
the entire candidate list before continuing to the next race, or returning to the prior race. De¬ 
select the check box in order to allow the voter to traverse voted candidates only in the candidate 
list if the maximum number of candidates have been voted in the race. 

15. De-select the Warn Undervotes check box if the audio voter should be able to continue to the 
next race or return to the prior race without being presented with an undervote warning, if less 
than the number to vote for has been voted in the race. Leave the check box selected if the voter 
is to be presented with a warning message upon attempting to leave an undervoted or blank 
voted race. 
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16. Select the Pollworker Audio check box if an audible tone is to be played at the outset of voting the 
ballot as well as upon ballot casting. Do not select the check box if no audible tone is to be 
played in the course of voting. 

The AccuVote-TS supports installation of a printer called the AccuView Printer Module (AVPM). This 
printer has been designed to allow voters to print and review their selections in each race while voting 
their ballot on the AccuVote-TS unit. When using the AVPM, voters may also optionally change and 
reprint their selections before their ballot is cast. A summary of all races on the voter's ballot (including 
races in which no votes are cast) and all voter's selections are printed to the AVPM summary/verification 
tape. 

For information on installing the AVPM on an AccuVote-TS unit, see the AccuView Printer Module 
Hardware Guide. 

17. Select Disable AVPM to disable printing ballot summary/verification information. When this option 
is not selected, ballot summary/verification information will be printed to the AVPM installed on 
the AccuVote-TS unit. 

18. Select Print Candidate IDs to print the candidates ID numbers and names on the AVPM 
summary/verification tape. When this option is not selected, candidate names are printed, but 
their ID numbers are not. 

19. Select Print Bar Codes to print all ballot summary/verification information in human readable text 
format and bar code format. When this option is not selected, candidate names are printed in 
human readable text format only. 

20. Select Bar Code with Write-Ins to print barcodes of candidate names and Write-In candidate 
names in human readable text format and bar code format on the AVPM summary/verification 
tape. Note that when using this option, the Print Bar Codes option must also be selected. When 
this option is not selected, all candidate names are printed in human readable text format only. 

21. Select Use Dual Roll to configure the AVPM to print summary/verification information on one 
paper roll and election reports on another roll. 

Note: Printing reports on one paper roll and ballot summary/verification information on another requires 
manually uninstalling and reinstalling the appropriate paper roll on the AccuView Printer Module during an 
election. See the AccuView Printer Module Hardware Guide for details. 

22. Select Log to Printer to print Audit Log entries to the AccuVote-TS printer. Deselect this option to 
disable printing Audit Log entries to the AccuVote-TS printer. 

23. Select Pedantic to print all trivial Audit Log entries to the AccuVote-TS printer. Deselect this 
option to disable printing trivial Audit Log entries to the AccuVote-TS printer. 

For example, an audit record is created for every ballot that is cast on the AccuVote-TS unit. 
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Figure 3-48. AccuVote-TS Options window 

24. Click on OK in order to save results. 

3.12. Reporting sets 

Races are grouped into reporting sets for the purpose of customizing election results reports, composing 
monitor scripts, and configuring recounts. Instead of directly selecting the races intended to be included 
in an election results report, the desired set of races may be pre-defined as a report set. 

Refer to section 3.9 Reporting Sets in the GEMS 1.18 Reference Guide for an explanation of the 
concepts behind reporting sets in GEMS. 

3.12.1. Adding reporting sets 

1. Click on Setup in the menu bar, then Reporting Sets in the drop-down menu. 
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Jurisdictional Definition 


9. Once the last district category has been defined, click on the OK button in order to exit the District 
Editor and save results. 



Figure 4-2. Adding a district 

10. Now districts are added to each district category. Select the first district category in the expanded 
district list in the tree view, right-click, and select Add Sub-District in the pop-up menu. 
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Figure 4-3. Adding a sub-district 

11. Enter the full district name in the Label field in the District Editor. 


12. Change the Id number in the Id field in order to change the sequence of the district within the 
district category, if necessary. 

13. Enter a tag value in the Tag field. 

14. Enter an export value in the Export field, if necessary. 

15. Specify the rotation number in the Start Rotation # field, if the district category is a rotation district. 

16. Click on the Add button. 


17. Continue adding districts in the district category in this manner. 

18. Once the last district has been defined to the district category, click on the OK button in order to 
exit the District Editor and save results. 

19. Continue adding districts to the remaining district categories in the same manner. 
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Figure 4-4. Rotation district 


4.1.3. Updating districts 

Update districts as follows: 

1. Double-click on the district to update. 

- District 

3 <UNASSIGNED > 
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IS © SENATORIAL 
51 ® ASSEMBLY 
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a 5a UNIFIED SCHOOLS 
a © ELEMENTARY SCHOOLS 
B © COMMUNITY SERVICE 
a CLEAR CREEK CSD 
© SPALDING CSD 


LEAVITT LAKE CSD 


B LITTLE VALLEY CSQ^ 

3 W PATTON VILLAGE CSD 
a WESTWOOD CSD 
3 STONES-BENGARD CSD 
Ei © FIRE PROTECTION 
B © HOSPITAL/HEALTHCARE 

Figure 4-5. Opening District Editor for update 

2. In the District Editor, change the descriptive district label in the Label field, if necessary. 

3. Change the Id number in the Id field in order to change the sequence of the district in the district 
list, if necessary. 

4. Change the tag value in the Tag field, if necessary. 
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5. Enter or change the export value in the Export field, if necessary. 

6. Click on the OK button to save changes. 

7. Continue updating districts as necessary. 



Figure 4-6. Adding a district 


4.1.4. Deleting districts 

Deleting a district removes the district from the database as well as any of the district’s linkages to base 
precincts. Any race linkages defined for the district are set to <Unassigned>. Deleting a district category 
removes the category as well as all subdistricts from the database. A district category that has been set 
to rotation district cannot be deleted until the Rotation District check box is de-selected. 


1 . 

2 . 

3. 

4. 


Expand the district category in the tree view. 

Select the district and click on the Delete Record icon. 
Click on the Yes button in order to confirm the deletion. 


Continue deleting districts in this manner. 
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Figure 4-7. Deleting a district 
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i. Click on the X Endorse button. 

ii. Endorse the second partisan instance of the candidate. 

iii. Continue cross-endorsing candidates in this manner, until all partisan instances 
of the cross-endorsed candidate have been defined. 

i. For every language defined in the election: 

i. Select the applicable language from the Language drop-down list. 

ii. Using the formatting tools and options available, enter candidate text for the 
language in the ballot text field at the bottom of the Candidates tab. 

iii. Click on the Audio button in order to record, import, or format audio information 
corresponding the candidate/language combination. 



Figure 5-4. Race Editor - Candidates tab 

46. Once all candidate definition is complete, click on the Add button to continue adding races in the 
election. At the completion of the last race, click on the OK button. 


5.2.4. Voter groups 

47. For each voter group to appear in the race: 

a. Select the voter group in the top, right-hand list, and click on the Add button. The political 
party now appears in the top, left-hand column. 
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• Change race and header formatting information 

• Alter language-related ballot text 

• Save results 

The Ballot and Card Editors display AccuVote-OS ballot artwork without precinct identifiers or control 
marks, such as cut marks. Note that while ballot artwork appears in AccuVote-OS ballot format only, 
these editors may also be used to preview AccuVote-TS ballot artwork. 

Activate the Ballot Editor by double-clicking on a ballot style or ballot. Activate the Card Editor by double¬ 
clicking on a card style or card. 
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OFFICIAL BALLOT 

CONSOLIDATED GENERAL ELECTION 
COUNTY OF LASSEN 
TUESDAY, NOVEIVBER 7, 2000 


INSTRUCTIONS TO VOTERS 

1. To vote you must completely darken the oval • next to the candidate or measure of your choice. If you mismarkan oval or 
change your mind .exchange your ballot for a new one. 

2 . To write in a name, you must completely darken the oval • to the left of the line provided and write in the name on the line 
p rovided 

3. All distinguishing marks or erasures are forbidden and make the ballot void 
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for President 
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for President 
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Figure 6-21. Card Editor 
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IN THE UNITED STATES DISTRICT COURT 
FOR THE NORTHERN DISTRICT OF GEORGIA 
ATLANTA DIVISION 


DONNA CURLING, ET AL., 
Plaintiffs, 

v. 

BRAD RAFFENSPERGER, ET AL., 
Defendants. 


Civil Action No. l:17-CV-2989-AT 


DECLARATION OF J. ALEX HALDERMAN 


J. ALEX HALDERMAN declares, under penalty of perjury, pursuant to 28 
U.S.C. § 1746, that the following is true and correct: 

1. The GEMS database itself is not sensitive and the State should be able 
to produce it subject to minimal security precautions, such as sending an encrypted 
copy via email with separate password to follow. 

2. GEMS is the Global Election Management System, a Windows 
application that election workers use to create ballot layouts, program voting 
machine memory cards, and aggregate election results from multiple voting 
machines. Data produced and processed by GEMS is stored in a Microsoft Access 
database file, the GEMS database. 

3. Detailed information about the operation of GEMS and the structure of 
the GEMS database is already part of the public record. Several states make their 
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GEMS databases public, as a matter of transparency. The GEMS software itself has 
been available for download from the website BlackBoxVoting.org for more than 
13 years, along with abundant technical documentation about the program. Experts 
have published several security analyses that detail vulnerabilities in the GEMS 
software. Were information from Georgia’s GEMS database to be revealed, it would 
not create any greater security risk than already exists by virtue of this publicly 
available information. 

4. Defendants assert that the “structure” of Georgia’s GEMS database is 
unique to Georgia, and that its disclosure would therefore aid attackers. This reflects 
a misunderstanding of how election-specific malware can operate. Malware does 
not need to be hard-coded for a specific race ID code or candidate number (which 
might be unique to a particular state). Instead, it can be programmed to search for 
the name of a candidate or political party, regardless of how that candidate or party 
is coded in the database. In any event, files that appear to be GEMS databases from 
certain past elections in Georgia have long been available online at 
http ://blackboxvoting. org/docs/diebold/marks- gems- files, zip . If there are 

characteristics that are unique to all GEMS databases used in Georgia, those 
characteristics are likely already ascertainable by attackers through analysis of these 
publicly available files. 
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5. Examining the GEMS database will allow Plaintiffs to begin 
investigating whether errors or attacks have impacted past Georgia elections. Such 
examination has the potential to uncover a range of problems, including errors in 
ballot preparation, software bugs and misconfigurations, data corruption, mistakes 
during tabulation, and certain forms of malicious software. Any of these problems 
could have resulted in anomalies in past elections and could recur in future elections. 

6. A review of reports generated by the GEMS software cannot substitute 
for an examination of the database itself. These reports contain only a subset of the 
information contained in the GEMS database. While the GEMS database is the 
actual data and coding used to operate the election, the reports are merely an 
approximate translation and summary, rendered into human-readable form by 
GEMS itself. Like any translation, the reports necessarily omit subtleties and 
nuances that can affect the meaning of the information. Moreover, since the reports 
are produced by the GEMS software, errors or malware affecting the GEMS system 
could cause crucial information to be omitted from the reports. 
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I declare under penalty of the perjury laws of the State of Georgia and the 
United States that the foregoing is true and correct and that this declaration was 
executed this 1st day of July, 2019 in Ann Arbor, Michigan. 
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